From 9d0ee1e9e8bc46967dbf2bcc44e50f6106b04b2f Mon Sep 17 00:00:00 2001 From: Natalia Ivakina Date: Tue, 9 Dec 2025 10:11:54 +0100 Subject: [PATCH 1/5] Update valid values of the initial settings for allowed/denied databases --- modules/ROOT/pages/configuration/configuration-settings.adoc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/ROOT/pages/configuration/configuration-settings.adoc b/modules/ROOT/pages/configuration/configuration-settings.adoc index 2674ab570..6c178a402 100644 --- a/modules/ROOT/pages/configuration/configuration-settings.adoc +++ b/modules/ROOT/pages/configuration/configuration-settings.adoc @@ -824,7 +824,7 @@ m|+++0+++ |Description a|List of database names allowed on this server; all others are denied. Empty means all are allowed. This configuration is initialized at the first DBMS startup and/or when a newly added server is enabled. The setting is used as the default input for the `ENABLE SERVER` command; can be overriden when the command is executed. Exclusive with `server.initial_denied_databases`. |Valid values -a|A comma-separated set where each element is a valid database name containing only alphabetic characters, numbers, dots, and dashes with a length between 3 and 63 characters, starting with an alphabetic character or number but not with the name `system`. +a|A comma-separated set where each element is a valid database name pattern containing only alphabetic characters, numbers, dots, question marks, asterisk and dashes with a length between 1 and 63 characters.. |Default value m|++++++ |=== @@ -840,7 +840,7 @@ m|++++++ |Description a|List of database names not allowed on this server. Empty means nothing is denied. This configuration is initialized at the first DBMS startup and/or when a newly added server is enabled. The setting is used as the default input for the `ENABLE SERVER` command; can be overriden when the command is executed. Exclusive with `server.initial_allowed_databases`. |Valid values -a|A comma-separated set where each element is a valid database name containing only alphabetic characters, numbers, dots, and dashes with a length between 3 and 63 characters, starting with an alphabetic character or number but not with the name `system`. +a|A comma-separated set where each element is a valid database name pattern containing only alphabetic characters, numbers, dots, question marks, asterisk and dashes with a length between 1 and 63 characters.. |Default value m|++++++ |=== From 0c0bf46ae43c43d08f0be41151b6637fe0632deb Mon Sep 17 00:00:00 2001 From: Natalia Ivakina <82437520+NataliaIvakina@users.noreply.github.com> Date: Tue, 9 Dec 2025 14:17:51 +0100 Subject: [PATCH 2/5] Explain what has been changed --- modules/ROOT/pages/configuration/configuration-settings.adoc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/modules/ROOT/pages/configuration/configuration-settings.adoc b/modules/ROOT/pages/configuration/configuration-settings.adoc index 6c178a402..8acb02796 100644 --- a/modules/ROOT/pages/configuration/configuration-settings.adoc +++ b/modules/ROOT/pages/configuration/configuration-settings.adoc @@ -845,6 +845,8 @@ a|A comma-separated set where each element is a valid database name pattern cont m|++++++ |=== +In Neo4j 2025.12, valid values of the `initial.server.allowed_databases` and `initial.server.denied_databases` settings are updated. +Starting from 2025.12, database name patterns (wildcards) are supported, and the minimum number of characters is reduced from `3` to `1`. [role=label--enterprise-edition] [[config_initial.server.mode_constraint]] From 3f8a75d5c6a3fced496feb617cc00cd51fbe0349 Mon Sep 17 00:00:00 2001 From: Natalia Ivakina <82437520+NataliaIvakina@users.noreply.github.com> Date: Tue, 9 Dec 2025 14:19:29 +0100 Subject: [PATCH 3/5] Add labels --- modules/ROOT/pages/configuration/configuration-settings.adoc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/ROOT/pages/configuration/configuration-settings.adoc b/modules/ROOT/pages/configuration/configuration-settings.adoc index 8acb02796..6325688a8 100644 --- a/modules/ROOT/pages/configuration/configuration-settings.adoc +++ b/modules/ROOT/pages/configuration/configuration-settings.adoc @@ -824,7 +824,7 @@ m|+++0+++ |Description a|List of database names allowed on this server; all others are denied. Empty means all are allowed. This configuration is initialized at the first DBMS startup and/or when a newly added server is enabled. The setting is used as the default input for the `ENABLE SERVER` command; can be overriden when the command is executed. Exclusive with `server.initial_denied_databases`. |Valid values -a|A comma-separated set where each element is a valid database name pattern containing only alphabetic characters, numbers, dots, question marks, asterisk and dashes with a length between 1 and 63 characters.. +a|label:changed[Changed in 2025.12] A comma-separated set where each element is a valid database name pattern containing only alphabetic characters, numbers, dots, question marks, asterisk and dashes with a length between 1 and 63 characters.. |Default value m|++++++ |=== @@ -840,7 +840,7 @@ m|++++++ |Description a|List of database names not allowed on this server. Empty means nothing is denied. This configuration is initialized at the first DBMS startup and/or when a newly added server is enabled. The setting is used as the default input for the `ENABLE SERVER` command; can be overriden when the command is executed. Exclusive with `server.initial_allowed_databases`. |Valid values -a|A comma-separated set where each element is a valid database name pattern containing only alphabetic characters, numbers, dots, question marks, asterisk and dashes with a length between 1 and 63 characters.. +a|label:changed[Changed in 2025.12] A comma-separated set where each element is a valid database name pattern containing only alphabetic characters, numbers, dots, question marks, asterisk and dashes with a length between 1 and 63 characters.. |Default value m|++++++ |=== From bc7481ec6969d9554b5de9258f69d2d7d4a6300c Mon Sep 17 00:00:00 2001 From: Natalia Ivakina <82437520+NataliaIvakina@users.noreply.github.com> Date: Tue, 9 Dec 2025 14:37:05 +0100 Subject: [PATCH 4/5] Update the page on changes and deprecations --- modules/ROOT/pages/changes-deprecations-removals.adoc | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/modules/ROOT/pages/changes-deprecations-removals.adoc b/modules/ROOT/pages/changes-deprecations-removals.adoc index 619bcb8ec..f351d22bb 100644 --- a/modules/ROOT/pages/changes-deprecations-removals.adoc +++ b/modules/ROOT/pages/changes-deprecations-removals.adoc @@ -647,6 +647,11 @@ For details, refer to xref:cypher-shell.adoc[]. === Configuration settings +Neo4j 2025.12:: + +Valid values of xref:configuration/configuration-settings.adoc#config_initial.server.allowed_databases[`initial.server.allowed_databases`] label:enterprise[Enterprise Edition] and xref:configuration/configuration-settings.adoc#config_initial.server.denied_databases[`initial.server.denied_databases`] label:enterprise[Enterprise Edition] are changed. +Starting from 2025.12, database name patterns (wildcards) are supported, and the minimum number of characters is reduced from `3` to `1`. + Neo4j 2025.06:: The default value of the xref:configuration/configuration-settings.adoc#config_server.metrics.filter[`server.metrics.filter`] label:enterprise[Enterprise Edition] is changed. From 990699b4f1d43a4812b4c6038698e376855cd855 Mon Sep 17 00:00:00 2001 From: Natalia Ivakina <82437520+NataliaIvakina@users.noreply.github.com> Date: Mon, 15 Dec 2025 15:22:17 +0100 Subject: [PATCH 5/5] Apply suggestions from code review --- modules/ROOT/pages/configuration/configuration-settings.adoc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/ROOT/pages/configuration/configuration-settings.adoc b/modules/ROOT/pages/configuration/configuration-settings.adoc index 6325688a8..7fb38e195 100644 --- a/modules/ROOT/pages/configuration/configuration-settings.adoc +++ b/modules/ROOT/pages/configuration/configuration-settings.adoc @@ -824,7 +824,7 @@ m|+++0+++ |Description a|List of database names allowed on this server; all others are denied. Empty means all are allowed. This configuration is initialized at the first DBMS startup and/or when a newly added server is enabled. The setting is used as the default input for the `ENABLE SERVER` command; can be overriden when the command is executed. Exclusive with `server.initial_denied_databases`. |Valid values -a|label:changed[Changed in 2025.12] A comma-separated set where each element is a valid database name pattern containing only alphabetic characters, numbers, dots, question marks, asterisk and dashes with a length between 1 and 63 characters.. +a|label:changed[Changed in 2025.12] A comma-separated set where each element is a valid database name pattern containing only alphabetic characters, numbers, dots, question marks, asterisks, and dashes with a length between 1 and 63 characters. |Default value m|++++++ |=== @@ -840,7 +840,7 @@ m|++++++ |Description a|List of database names not allowed on this server. Empty means nothing is denied. This configuration is initialized at the first DBMS startup and/or when a newly added server is enabled. The setting is used as the default input for the `ENABLE SERVER` command; can be overriden when the command is executed. Exclusive with `server.initial_allowed_databases`. |Valid values -a|label:changed[Changed in 2025.12] A comma-separated set where each element is a valid database name pattern containing only alphabetic characters, numbers, dots, question marks, asterisk and dashes with a length between 1 and 63 characters.. +a|label:changed[Changed in 2025.12] A comma-separated set where each element is a valid database name pattern containing only alphabetic characters, numbers, dots, question marks, asterisks, and dashes with a length between 1 and 63 characters. |Default value m|++++++ |===