non admin users can use sn utils on servicenow

[Community Alums]

non admin users can use sn utils on servicenow???????????

and manipulate several fields.

[Mark Roethof · Accepted solution]

Hi there,

If you have proper security in place, ACL's for example, that shouldn't be possible. If you have poor security in place, like poort client side solutions... that could be the case.

What's the reason behind your question?

[Mark Roethof · Accepted solution]

Hi there,

If you have proper security in place, ACL's for example, that shouldn't be possible. If you have poor security in place, like poort client side solutions... that could be the case.

What's the reason behind your question?

[Community Alums]

just curiosity, but your answer nailed it. Tks!!!!!!!

[Arnoud Kooi · Accepted solution]

Only admins and impersonated users can edit the field on label Doubleclick.

Non-admins only can view the value.

[XvE]

That actually introduces some risks with the new time-limited-role feature probably allowing more people the impersonate role (temporarily)

It actually caught me out when I was impersonating on my normal user that was granted impersonate role and I could break the system...

I realize the gs.isImpersonating() is probably the easiest way to find out, but it is definitely not failsafe.