---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enforce Query ACLs for Knowledge Quick Links

# Enforce Query ACLs for Knowledge Quick Links {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Enforce query ACLs for Knowledge Quick Links using a system property.
When the com.glide.security.query_acl.enabled.knowledge_quick_links system property is set to true, query ACLs are enforced for Knowledge Quick Links. If this property is set to
false, an attacker can use blind queries to enumerate and exfiltrate data due to the default behavior of `GlideRecord.addEncodedQuery`.

If the property doesn't exist in the System properties \[sys_properties\] table, the secure default of true is used. A third option, external_and_guests enforces query ACLs only for
external users and guests.

Verify that the com.glide.security.query_acl.enabled.knowledge_quick_links system property is set to true.

## More information {#sc-enforce-query-acls-for-knowledge-quick-links__section_lnh_pkf_32c}

{#sc-enforce-query-acls-for-knowledge-quick-links__table_hhv_dvg_1xb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | com.glide.security.query_acl.enabled.knowledge_quick_links |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | String - Used as a ternary operator |
| Recommended value | true |
| Default value | true |
| Fallback value | true |
| Category | [Architecture, design, and threat modeling](https://servicenow-prod.fluidtopics.net/GP7csKl7x_IoFFA7nE_oew "This broad control addresses high level design considerations and key elements to implement a secure application. This covers the tenants of availability, confidentiality processing integrity, non-repudiation and privacy. Additionally, elements of a secure software development lifecycle are included.") |
| Security risk | * Severity score: 5.3 * CVSS score: Medium * Security Risk: ACLs can be bypassed, disclosing field data to users who don't have permissions to see it. This disclosure could include sensitive data depending on the table exploited. {#sc-enforce-query-acls-for-knowledge-quick-links__ul_ihv_dvg_1xb} |
| Functional impact | Users aren't able to perform specific queries on fields where they don't have field level access. |
| Dependencies and prerequisites | None |
[ ]

{#sc-enforce-query-acls-for-knowledge-quick-links__table_hhv_dvg_1xb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).