Write restricted field is setting the field value on form submission


Description

If a field value is set via display business rule or client script on write restricted field and the value is allowed to set on form submission even after write ACL failing on on the field then the issue is with the system property

Instructions

Check for system property 'glide.security.strict.updates' is 'false', setting this property to 'true' will double-checks security on inbound transactions during form submission.

With this property to 'true', the value on the restricted write field is not set on form submission with debug log 'Security restricted: Access denied to set field <field_name>'

Additional Information

https://community.servicenow.com/community?id=community_question&sys_id=4ed970fddb566340afc902d5ca961965
https://docs.servicenow.com/csh?topicname=r_GeneralSecuritySettings.html&version=latest