SQL Allow List

Note: Custom SQL Allow List are not supported at this time.

Sites not wanting to use this SQL function allow list should ensure that the spl.runtime.customSQLSecurity is set to false in the spl.properties file.

The SQL used in query zones and in Groovy scripts can be limited in terms of what SQL functions are supported to prevent performance issues or inappropriate access to the database via functions.

The product provided allow list is implemented as a Managed Content object named F1-SQLFunctionWhiteList. This allow list is not changeable and lists the supported functions that are allow listed for use. Any function used that is not used in this allow list, if the facility is enabled, will generate a runtime error when the SQL is executed.