Client-callable script includes are public by default, which can expose sensitive functionality. If not properly secured, unauthorized users can access them, leading to potential security risks. Enabling privacy settings ensures that only authorized users can execute these scripts.
Resolution Steps
Add the glide.script.ccsi.ispublic system property.
Set its value to false to ensure only authenticated users can access client-callable script includes.
Enabling privacy settings on client-callable script includes protects sensitive functionality from unauthorized access. By setting glide.script.ccsi.ispublic to false, organizations enhance security and prevent exposure of critical business logic.
For more detailed guidance on resolving this issue, please contact us at support@dt-advisory.ch.