OnChange catalog client script which is used to set the value for two variables based on a reference variable is not working always.Issue There is an onChange catalog client script defined on a variable set, that is used to populates two hidden variables 'employee_first_name' and 'employee_last_name' based on the value selected for reference variable 'employee_name' which is displayed on the form. Sometimes, 'employee_first_name' and 'employee_last_name' variables have no value even though the reference variable does have value in it. ie. The client script is not working always.Cause- These variables have no value for cases when the request is placed by an user who does not have read access permission on sys_user record due to an OOB ACL => /sys_security_acl.do?sys_id=7df70f39c0a801661fb9e679f553c760 which is failing for this user. - As per this ACL, the logged in user must have some role when they do not have any role then this ACL will fail and the user will not be able to access the employee first name and last name information. - Hence the client script fails to set the value for variables 'employee_first_name' and 'employee_last_name'ResolutionThe reason why it is not working under all cases is that it depends on the user who places the request. If the logged in user does not have any role then they will be denied read access to the sys_user record due to following OOB ACL => /sys_security_acl.do?sys_id=7df70f39c0a801661fb9e679f553c760 So, to fix the issue, you may either add some role to all those users who places the request or create your own custom ACL that will provide read access to sys_user record for those users who do not have any role.