---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Validate query ACLs on Glide DB functions \[New in Security Center 7.0\]

# Validate query ACLs on Glide DB functions \[New in Security Center 7.0\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Control whether query ACLs are applied to Glide DB functions using system properties.
When the glide.db.encoded_query.check_function_field_query_acls system property is set to true, query ACLs (query_range and query_match) are validated by default on these Glide DB
functions:

* glidefunction:position
* glidefunction:substring
* glidefunction:concat
* glidefunction:coalesce
* glidefunction:length

{#validate-query-acls-on-glide-db-functions__ul_rby_cqp_qfc}

To validate these query ACLS on additional functions, add those functions to the glide.db.encoded_query.force_query_range_on_functions system property.

Set the glide.db.encoded_query.check_function_field_query_acls system property to true, or confirm that the property isn't on the System Properties \[sys_properties\] list.

## More information {#validate-query-acls-on-glide-db-functions__section_lnh_pkf_32c}

{#validate-query-acls-on-glide-db-functions__table_hhv_dvg_1xb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | * glide.db.encoded_query.check_function_field_query_acls * glide.db.encoded_query.force_query_range_on_functions {#validate-query-acls-on-glide-db-functions__ul_ywg_tsp_qfc} |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | * Boolean * String list {#validate-query-acls-on-glide-db-functions__ul_h3d_ltp_qfc} |
| Recommended value | * true * glidefunction:position, glidefunction:substring, glidefunction:concat, glidefunction:coalesce, glidefunction:length {#validate-query-acls-on-glide-db-functions__ul_swn_4tp_qfc} |
| Default value | * true * glidefunction:position, glidefunction:substring, glidefunction:concat, glidefunction:coalesce, glidefunction:length {#validate-query-acls-on-glide-db-functions__ul_fmh_qtp_qfc} |
| Fallback value | * true * glidefunction:position, glidefunction:substring, glidefunction:concat, glidefunction:coalesce, glidefunction:length {#validate-query-acls-on-glide-db-functions__ul_vgm_rtp_qfc} |
| Category | [Access control](https://servicenow-prod.fluidtopics.net/xAmazkRh5FKyeb7q4TQGWw "The access control category audits the process of protecting resources from unauthorized access through granting and denying requests based on a permission model. This includes ensuring an entity accessing a resource holds valid credentials to do so, creating and protecting a well-defined set of roles or permissions and ensuring role or permission controls are protected from replay and tampering.") |
| Security risk | * Severity score:5.3 * CVSS score: Medium * If the glide.db.encoded_query.check_function_field_query_acls system property exists and isn't set to a value of true, a logged-in user may be able to infer data blindly, leading to sensitive information disclosure. {#validate-query-acls-on-glide-db-functions__ul_ihv_dvg_1xb} |
| Functional impact | Users may expect to see values from function fields but get blocked due to ACLs enforced on the function fields. |
| Dependencies and prerequisites | None |
[ ]

{#validate-query-acls-on-glide-db-functions__table_hhv_dvg_1xb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).