---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enforce Strict User Image Upload

# Enforce Strict User Image Upload {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Use the glide.security.strict.user_image_upload property to enable
Access Control for the upload/update of a profile picture when performed on a user
record.
This setting opens the possibility of an unauthorized user uploading an image to another
user's profile.

* When you set this property to true, the table ACLs are enforced when uploading photos, only allowing authorized users to upload an image.
* When you set it to false, ACLs are not enforced on image uploads to the Photo field.
{#sc-enforce-strict-user-image-upload__ul_knp_md4_pkb}

## More information {#sc-enforce-strict-user-image-upload__section_more_information}

{#sc-enforce-strict-user-image-upload__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Property name | glide.security.strict.user_image_upload |
| Configuration type | System Properties (/sys_properties_list.do) |
| Category | [Access control](https://servicenow-prod.fluidtopics.net/xAmazkRh5FKyeb7q4TQGWw "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Purpose | To restrict uploading of user image only to authorized users. |
| Recommended value | true |
| Security risk rating | 3.7 |
| Functional impact | No functionality impact as authorized users are still able to upload images to their user profile. |
| Security risk | (Low) When you set this property to false, an authenticated user could upload an image to another user's account without authorization. |
[ ]

{#sc-enforce-strict-user-image-upload__table_ajc_b43_3kb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).