ClientScript would be running under current Role and that would be the created bye... unless you are sending data to a suitelet which is actually who handle the record creation...