Enforce read ACLs on report views

reference australia Updated Sep 10, 2026 1 min read sc-enforce-read-acls-on-report-views.md
Raw file servicenow.com

Manage how Read ACLs are enforced on your instance.

The property glide.report.report_view.read_acl, when set to enforce, enforces the read ACL (table level) on reporting functions when there is no Report View ACL on the table/field.

Ensure the property glide.report.report_view.read_acl is set to enforce.

More information

Attribute

Description

Configuration name

glide.report.report_view.read_acl

Configuration type

System Properties (/sys_properties_list.do)

Data type

string

Recommended value

enforce

Default value

enforce

Fallback value

enforce

Category

Architecture, design, and threat modeling

Security risk

  • Severity score: 7.1
  • CVSS score: High
  • Security risk details: Not setting this property to enforce could cause ACLs to be bypassed.

Dependencies and prerequisites

None

## More information

Attribute

Description

Configuration name

glide.report.report_view.read_acl

Configuration type

System Properties (/sys_properties_list.do)

Data type

String

Recommended value

enforce

Default value

enforce

Fallback value

enforce

Category

Architecture, design, and threat modeling

Security risk

  • Severity score: 7.1
  • CVSS rating: High
  • Security risk details: ACLs could be bypassed, leading to potential sensitive information disclosure.

Functional impact

None

Dependencies and prerequisites

None

**Parent Topic:**[Architecture, design, and threat modeling](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-architecture-design-threat-molding.md)
Search documentation
Search document titles and file paths on the australia branch