--- title: Require write access to access service catalog add item page description: Use the glide.sc.request.add\_item\_write\_access property to prevent unauthorized operations from being performed on catalog items. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/instance-security-hardening-settings/sc-require-write-access-to-access-service-catalog-add-item-page.html release: australia product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Configuration, Hardening settings, Platform Security] --- # Require write access to access service catalog add item page Use the **glide.sc.request.add\_item\_write\_access** property to prevent unauthorized operations from being performed on catalog items. When the **glide.sc.request.add\_item\_write\_access** system property is not set to **true**, any logged in user can access the **Add Catalog Item** UI page. This could result in unauthorized operations performed on catalog items. Set **glide.sc.request.add\_item\_write\_access** property to **true**. ## More information
Attribute Description
Configuration name **glide.sc.request.add\_item\_write\_access**
Configuration type System Properties \(/sys\_properties\_list.do\)
Data type Boolean
Recommended value true
Default value <none>
Fallback value false
Category [Configuration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-configuration.md)
Security risk - Severity score: 4.3 - CVSS score: Medium - Security risk details: This creates a risk of unauthorized modifications or additions to catalog items, potentially leading to service disruption, fraudulent requests, or exposure of sensitive data. Misconfigured access controls in catalog management can undermine system integrity.
Dependencies and prerequisites None
Functional impact When the property is true, the user must have write access to the record in the context of the UI page.
**Parent Topic:**[Configuration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-configuration.md)