--- title: Restrict knowledge bases access description: The glide.knowman.block\_access\_with\_no\_user\_criteria property is used to control the read/write access of users on knowledge based articles. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/instance-security-hardening-settings/sc-restrict-knowledge-bases-access.html release: australia product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Access control, Hardening settings, Platform Security] --- # Restrict knowledge bases access The **glide.knowman.block\_access\_with\_no\_user\_criteria** property is used to control the read/write access of users on knowledge based articles. The **glide.knowman.block\_access\_with\_no\_user\_criteria** system property is used in knowledge record user criteria security. If **glide.knowman.block\_access\_with\_no\_user\_criteria** isn't set to the recommended value of **true**, then knowledge bases without can read or can contribute user criteria become readable and writable by all users. Ensure the property **glide.knowman.block\_access\_with\_no\_user\_criteria** is set to **true**. ## More information
| Attribute | Description |
|---|---|
| Configuration name | **glide.knowman.block\_access\_with\_no\_user\_criteria** |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | false |
| Category | [Access control](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-access-control.md) |
| Security risk | - Severity score: 9.1 - CVSS score: Critical - Security risk details: Knowledge bases lacking explicit "can read" or "can contribute" user criteria may become accessible and editable by all users, potentially leading to unauthorized access and modification of sensitive knowledge content. |
| Dependencies and prerequisites | None |
| Functional impact | Denies access to a knowledge base when either Can Read or Can Contribute isn't specified. |