--- title: Ensure archive table ACLs are checked description: The glide.security.enable\_archive\_table\_acls property controls whether access control lists \(ACLs\) of the original table, the table the archive table was created from, are evaluated to false. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/instance-security-hardening-settings/sc-ensure-archive-table-acls-are-checked.html release: australia product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Access control, Hardening settings, Platform Security] --- # Ensure archive table ACLs are checked The **glide.security.enable\_archive\_table\_acls** property controls whether access control lists \(ACLs\) of the original table, the table the archive table was created from, are evaluated to false. The **glide.security.enable\_archive\_table\_acls** system property controls whether ACLs added to archive tables are evaluated \(**true**\) or if only the ACLs of the original table \(the table the archive table was created from\) are evaluated \(**false**\). There is no reason for this property to not be true since the original table ACLs will be evaluated regardless of its value and since a customer can simply avoid additional ACLs for an archive table by not adding them. Ensure that the value of **glide.security.enable\_archive\_table\_acls** is set to **true**. ## More information
| Attribute | Description |
|---|---|
| Configuration name | **glide.security.enable\_archive\_table\_acls** |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | true |
| Category | [Access control](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-access-control.md) |
| Security risk | - Severity score: 3.0 - CVSS score: Low - Security risk details: If the property is set to false, ACLs added to archived tables will be ignored, an action which is counter intuitive and may lead to authorization bypass. |
| Functional impact | When this property is set to true, any active read ACLs on archive tables will be honored. If no active read ACLs exist or the property is set to false, the original table's \(table from which data was archived\) will apply to the archive table.**Note:** Only read ACLs are supported on archive tables. Other operations on archive tables are governed internally through an Access Handler. |
| Dependencies and prerequisites | None |