---
sourceDocument: Xanadu API Reference
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/xanadu/api-reference

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu API Reference

ft:clusterId :

    - crapiref

bundleId :

    - crapiref

workflow :

    - Creator


---

# Secure and protect a processor

# Secure and protect a processor {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

You can protect your processor against unauthorized use by using role restrictions,
and protect it by requiring a CSRF token.

## About this task

Note:  
This feature is deprecated. While legacy, existing custom processors continue to be supported, creating new custom processors has been deprecated. Instead, use the [Scripted REST APIs](https://servicenow-prod.fluidtopics.net/x1EOw4mDLxo1z7QG_tlNhQ "The scripted REST API feature allows application developers to build custom web service APIs.").

You can re-use a table's user role restrictions to protect it from access by your
processor. This protection method assumes the processor will access table data.

## Procedure

1. Create or select a user role that has access to the table the processor script calls.
2. Navigate to System DefinitionProcessors.
3. In Script, add the following code block.  

       var now_GR = new GlideRecord('your_table_name');
       // canRead() compares the table's ACL to the user making this request, and returns true if the logged-in user has read access to this table
       if(gr.canRead())  
       { 
         // Perform table query here  
         g_processor.writeOutput('Success!'); 
       } else { 
         g_processor.writeOutput('You do not have permission to read table your_table_name'); 
       }

4. Update the code block to use other access restrictions as needed.  
   Available access functions include:  
   * canCreate()
   * canRead()
   * canWrite()
   * canDelete()
   {#t_SecureAProcessor__ul_ccy_3z2_sr}
5. Click Update.

## Protect a processor with a CSRF token {#ariaid-title2}

You can protect a processor by requiring a CSRF token.

### About this task

Script type processors can require a CSRF token check before the processor runs.

### Procedure

1. Navigate to AllSystem DefinitionProcessors.
2. Open a processor record.
3. Select the CSRF protect option.
4. Click Update.
**Related topics**   

* [Assign a role to a user](https://www.servicenow.com/docs/access?context=t_AssignARoleToAUser&version=xanadu&pubname=xanadu-platform-administration&ft:locale=en-US)

*[\>]: and then