Created, Created By, Updated, and Updated By have become editable from list views.

[WB]

Problem: 
- The Created and Created By fields have become editable when double-clicked in a list view and this represents a problem for process integrity if users can edit those values.  For example, a user altered a Created Date to be in the future.  Additionally, the Updated and Updated By fields are now interactive from list-view and capture the current user and time-stamp even though no edits were made to the underlying record.
Other Observations:
- The editability issue is present in all instances and on multiple tables - Incident, Problem, Asset, and more.
- These fields have not been editable from the list view in the past
- These fields are not editable in a PDI instance, so we've concluded editability is not OOTB, but can't find a cause   
- For closed incidents, these fields are not editable and show the "Security prevents writing to this field" message as we would expect, but for other Incident States (New, WIP, Resolved) the fields are editable.

We are at a loss for the cause or where to look because there have been no development efforts to alter the list views.  If anyone has ideas on what might have caused these fields to become editable or how to get it back to Out-of-box, please advise.  All ideas for diagnosing the root cause are welcome.  Thank you.   

[Mike_R · Accepted solution]

make sure these ACLs are present and that no one modified them

instanceName.service-now.com/sys_security_acl_list.do?sysparm_query=nameLIKE*.sys_&sysparm_view=

[Sagar Pagar]

Hi @WB,

Your recent new configuration/newly added ACLs may have been the cause of this issue.

Try to Debug All security and find out the write ACL which cause this editable.

Thanks,
Sagar Pagar

[WB]

Thank you, everyone!  Knowing where to look helped our development team find the issue.