ok thanks I'll need to look into suitelets. Would a SCA SuiteScript file running under

Customer Center

role have permission to execute a suitelet? These bloody roles are quite weird and IMO restrictive to web development.