Servicenow acl query

[Aditya08]

Hi everyone, I’ve noticed that some properties/records which are restricted to be updated only by the maint role in the UI can still be modified using Scripts – Background. Is this expected platform behavior due to elevated script execution privileges, or is there a recommended way to prevent such updates? I’m trying to understand the security best practices around controlling admin/script-level changes and whether additional ACLs or governance controls are typically used

After background script :

Background script: 

I also look at its acl then i got ACL Like write access is only for nobody role,still it will get updated by background script 

[Ankur Bawiskar]

@Aditya08 

you are using GlideRecord and it doesn't evaluate ACL

If you use GlideRecordSecure, it checks ACL and you won't be allowed to update

Try that once

GlideRecordSecure | GlideRecord vs GlideRecordSecure | When to use GlideRecordSecure 

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏