Good morning everyone! Best practice question: It seems like every time I add a custom script for someone, I need to grant them new permissions. Sometimes it's things like the script needs to validate form input against data the user doesn't have access to but which doesn't get displayed on-screen. I'm worried that I'm gradually adding permissions to roles that shouldn't have access to the things I'm giving them access to. Is it better to set the script to run as a role that has access to those things, or is it better to just keep granting permission to users every time I add something?