Access to a store application's code

[KrithikaV]

Hi,

We are developing an app for the ServiceNow store. The users with 'admin' role have access to the code - scripts, business rules, studio, rest apis etc.
My understanding is this - after the app is published, no one except the users with admin role can access the code behind the application. Is this assumption correct?

In case if a customer who has bought the application requires some customization, how do we (application developer) log into their instance without admin privileges and make customization.

What is the best practice followed by app developers while app publishing so that they can do some customization at the client's end at a later stage without admin privileges?

Thanks,
Krithika

[GlideFather · Accepted solution]

Hi @KrithikaV 

for code maintenance and most of configurations, it will require admin role. Eventually you can have some privileges as itil_admin but this is more from process rather than development perspective. Custom app can have admins specific just for that scope.

If you want to do customisations in client's end, you will definitely need admin, no possibility without that.

You can maintain configurations to reduce the need of admin for example using system property and changing value in that property will change the behaviour but it is not possible to do complex changes, this would be for example for assigning groups or approver setting...

Also, what do you mean exactly "We are developing an app for the ServiceNow store."?

EDIT: first paragraph + formatting

[GlideFather · Accepted solution]

Hi @KrithikaV 

for code maintenance and most of configurations, it will require admin role. Eventually you can have some privileges as itil_admin but this is more from process rather than development perspective. Custom app can have admins specific just for that scope.

If you want to do customisations in client's end, you will definitely need admin, no possibility without that.

You can maintain configurations to reduce the need of admin for example using system property and changing value in that property will change the behaviour but it is not possible to do complex changes, this would be for example for assigning groups or approver setting...

Also, what do you mean exactly "We are developing an app for the ServiceNow store."?

EDIT: first paragraph + formatting

[Ankur Bawiskar · Accepted solution]

@KrithikaV 

to protect your code such as Business rule, script include from viewing the source code you can give Protection policy

Application file protection policy 

Ways to handle to update the components

1) Ask customer to give temp-admin

OR

2) ask them to use Delegated development

Delegated development and deployment 

If my response helped please mark it correct and close the thread so that it benefits future readers.

[Ankur Bawiskar]

@KrithikaV 

Hope you are doing good.

Did my reply answer your question?

If my response helped please mark it correct and close the thread so that it benefits future readers.