When using g_modal, is there a way to force security rules?

[mpsteve137]

I am setting up a UI Action that allows users to create contacts from a case form, but no ACL checks are happening. Or in other words, users without access to create contacts are still able to. I turned on security debugging and confirmed no ACLs are running when the modal displays, nor when they submit. Any ideas?

[Sheldon Swift]

Hi @mpsteve137 - It might be helpful if you share your code. Assuming you're using GlideRecord, use GlideRecordSecure instead.

[jcmings]

Agree with Sheldon, please provide code and/or use GlideRecordSecure. Alternatively you could restrict the visibility of the UI Action.