Require write access to access service catalog add item page

reference brazil Updated Sep 10, 2026 1 min read sc-require-write-access-to-access-service-catalog-add-item-page.md
Raw file servicenow.com

Use the glide.sc.request.add_item_write_access property to prevent unauthorized operations from being performed on catalog items.

When the glide.sc.request.add_item_write_access system property is not set to true, any logged in user can access the Add Catalog Item UI page. This could result in unauthorized operations performed on catalog items.

Set glide.sc.request.add_item_write_access property to true.

More information

Attribute

Description

Configuration name

glide.sc.request.add_item_write_access

Configuration type

System Properties (/sys_properties_list.do)

Data type

Boolean

Recommended value

true

Default value

true

Fallback value

false

Category

Configuration

Security risk

  • Severity score: 4.3
  • CVSS score: Medium
  • Security risk details: This creates a risk of unauthorized modifications or additions to catalog items, potentially leading to service disruption, fraudulent requests, or exposure of sensitive data. Misconfigured access controls in catalog management can undermine system integrity.

Dependencies and prerequisites

None

Functional impact

When the property is true, the user must have write access to the record in the context of the UI page.

**Parent Topic:**[Configuration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-configuration.md)
Search documentation
Search document titles and file paths on the brazil branch