Write restricted field is setting the field value on form submission


If a field value is set via display business rule or client script on write restricted field and the value is allowed to set on form submission even after write ACL failing on on the field then the issue is with the system property


Check for system property 'glide.security.strict.updates' is 'false', setting this property to 'true' will double-checks security on inbound transactions during form submission.

With this property to 'true', the value on the restricted write field is not set on form submission with debug log 'Security restricted: Access denied to set field <field_name>'

Additional Information