Regarding new Properties: in Madrid there is a new property for enforcing data requirements, including rest api calls:

 

com.snc.change_management.enforce_data_requirements

 

Enforce change request process data requirements, so that any data modification on the change request has the same data restrictions. This includes, updates made through the change request form, Workflow, REST/SOAP, JavaScript, and GlideRecord updates. For more information, see Change Management API

In the User Interface, when this property is true, it enables additional server sided restrictions to the UI Policy and Client Script controls that already exist.

• Type: true | false
• Default value: true