Collection Mode Override Property
This article is based on the ServiceNow support article. See the original article on the ServiceNow support site: ServiceNow HI: Collection Mode Override Property.
Collection Mode was designed to provide backwards compatibility for highly customized instances using Package calls that were created on a version prior to Calgary. The "Collection Mode" property allows for the direct calling of new Java packages that have not been called before. Once enabled, this plugin manages the relationship between the server side code and Collection mode property to enforce security restrictions.
This property has been deprecated in Helsinki and later family versions.
| Collection Mode | |
|---|---|
| Property Name | glide.whitelist.manager.collection_mode.override |
| Configuration Type | System Properties (/sys_properties_list.do) |
| Purpose | The disabling of the "Collection Mode" system property will close the security gap that exists when importing Java package calls into an instance. |
| Requirement | Mandatory |
| Recommended Value | False |
| Default Behavior | Set to false. |
| Revertible behavior | Safe_overrides. Meaning, this property is non revertible once changed. |
| Role required | Security_admin |
| Release Version | Calgary. This property has been deprecated for Helsinki and later versions. |
| Functional Impact | (Low) There should be no impact as long as the results from the section 10.6 are reviewed and approved. To ensure proper functioning of the instance, ServiceNow recommends to test the changes in a sub-production environment before deploying in the production environment |
| Security Risk | (High) Client side API calls that result in data retrieval or object access on server are deemed to be dangerous from a security standpoint and should be validated for authorization and restriction for sensitive object access. |
| Workaround | No alternate method available. |
| References | https://hi.service-now.com/kb_view.do?sysparm_article=KB0621483 |
How to configure
- Navigate to /sys_properties_list.do.
- Search for the property.
- If the property does not exist, then click 'New' to create new property.
- Assign the recommended value as shown in the screenshot > Click Update/submit.
