Android Mobile App: read change_request.parent ACL displays all change_request records while navigating the related list Change Request > Parent even when requires role is selected.
Create an ACL per the attached screenshot change_request_acl.
Create a user "test" with itil role and without the admin role.
Open any change_request record form, for example, "CHGA", using the Mobile view.
Click Configure > Related List and add Change Request > Parent.
For the related list Change Request, click the Edit button and add several changes per the attached screenshot change_request_parent.png.
Make sure that there is a Module for mobile that can shows CHGA.
Access the instance using the Android Mobile App and not $m.do and open CHGA.
Click on related list and open "Change request".
Instead of only the Change requested that was previously added through the related list being displayed, all the change requests accessible for the user are displayed.
Removing the required roles admin, selecting Advanced true and checking the role from the script avoids the issue.
After carefully considering the severity and frequency of the issue, and risk of attempting a fix, it has been decided not to address this issue. We do not make this decision lightly, and we apologize for any inconvenience. If you have any questions regarding this problem, contact ServiceNow Customer Support.