Require write access to access service catalog add item page [New in Security Center 1.3]

Use the glide.sc.request.add_item_write_access property to prevent unauthorized operations from being performed on catalog items.

More information

AttributeDescription
Configuration name glide.sc.request.add_item_write_access
Configuration type System Properties (/sys_properties_list.do)
Data type boolean
Recommended value true
Default value false
Category Configuration
Security risk
  • Severity score: 4.3
  • CVSS score: Medium
  • Security risk details: When the glide.sc.request.add_item_write_access property is set to false, any logged in user can access the Add Catalog Item UI page. This could result in unauthorized operations performed on catalog items. To remediate this security risk, set this property to true.
Dependencies and prerequisites None
Functional impact When the property is true, the user must have write access to the record in the context of the UI page.