View Categories

GlideRecord API Usage In Scripted REST API Resource

Table of Contents
Impact Area
Security
Severity

High

Affected Element

N/A

Rule ID #

SN-RESTAPI_GLIDERECORD

Impact #

Scripted REST APIs should use the GlideRecordSecure API. This API ensures that access controls defined on the underlying data are applied for the requesting user.

Remediation #

Ensure that all REST API Resources use GlideRecordSecure methods, instead of GlideRecord methods.

Time to fix

15 min

Powered by BetterDocs