---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enable ACLs for Encoded Query in Simple List Widget \[New in Security Center 2.0\]

# Enable ACLs for Encoded Query in Simple List Widget \[New in Security Center 2.0\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Learn how to set the glide.service_portal.enable_acls_for_encoded_query_in_list property to the secure value to prevent users from bypassing access control list (ACL) evaluations on a query condition in
the Simple List Widget.
When the glide.service_portal.enable_acls_for_encoded_query_in_list property is not set to the secure value of true, a user may be able to bypass access control list (ACL) evaluations on a query condition
in the Simple List Widget. If the property is set to false, it reverts to previous behavior, enforcing ACL checks for an encoded query based on the enforce_acl checkbox value.

It is a best practice to evaluate ACLs within queries to ensure that a user has access to the fields being queried, thereby preventing unauthorized data leakage.

Ensure that the glide property glide.service_portal.enable_acls_for_encoded_query_in_list is set to true. If the property does not exist in the sys_properties table, the default value is true.

## More information {#sc_enable_acls_for_encoded_query_in_simple_list_widget__section_qhx_1b1_xwb}

{#sc_enable_acls_for_encoded_query_in_simple_list_widget__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | com.glide.script.fencing.cross_scope_access.shared_table_support |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | string |
| Recommended value | true |
| Default value | true |
| Category | [Access control](https://servicenow-prod.fluidtopics.net/xAmazkRh5FKyeb7q4TQGWw "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score: 4.3 * CVSS score: Medium * Security risk details: Not setting this property to the recommended value of true. {#sc_enable_acls_for_encoded_query_in_simple_list_widget__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| Functional impact | The Simple List Widget may not display any data depending on the user's role and the underlying ACLs. Additionally, users might encounter security warnings if the Simple List query contains filter conditions with properties that are not accessible to the current user. |
[ ]

{#sc_enable_acls_for_encoded_query_in_simple_list_widget__table_ajc_b43_3kb}