---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Deny unauthorized access to request items \[Updated in Security Center 1.3\]

# Deny unauthorized access to request items \[Updated in Security Center 1.3\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

The glide.sc.req_for.roles.default property defines a default
behavior for the retrieveAddress API.
This property is functional only when glide.sc.req_for.roles has no
values. If glide.sc.req_for.roles has values, then this property has no
significance and users with only defined roles are given access to the API.

## More information {#sc-deny-unauthorized-access-to-request-items__section_more_information}

|-|-|
| Attribute | Description |
| Property name | glide.sc.req_for.roles.default |
| Configuration type | System Properties (/sys_properties_list.do) |
| Category | [Access control](https://servicenow-prod.fluidtopics.net/xAmazkRh5FKyeb7q4TQGWw "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Purpose | When there are no roles given in the property, the Client Callable Script Include ScriptServiceCatalogGetLocation can be called by any unprivileged logged-in user and can retrieve the address of any other users in the system. This property protects this API to be exposed to unprivileged users. |
| Recommended value | deny |
| Default value | deny |
| Configuration type | Choicelist (allow \| deny) |
| Security risk | (Moderate) If glide.sc.req_for.roles.default is not set to the recommended value of deny (allow) and the value of glide.sc.req_for.roles is empty, then any user can request items for other users allowing unauthorized resource access. |
| References | [Client-callable script includes](https://www.servicenow.com/docs/access?context=c_ScriptIncludes&version=australia&pubname=australia-api-reference&ft:locale=en-US) |
[ ]

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).