if it is client side, the way around it is to have your client script call a suitelet which is running as admin, and your suitelet does whatever search/lookup on the restricted record, then returns the result to the client script.