https://netsuiteprofessionals.com logo
Join Slack
Powered by
Why does Netsuite not allow setting "Execute as Ro...
# suitescript
a
Why does Netsuite not allow setting "Execute as Role" on a restlet?
b
to make sure that the external user is not allowed to do something they dont have permission for
a
But doesn't the external user need to be authenticated anyway?
b
correct, and that user has specific permissions
t
They also have external suitelets without authorization which can be executed as an admin
a
Which is what I am asking is a suitelet allowed and and not a restlet
correct, and that user has specific permissions
And I can give any logged in user a script which can run at higher level permissions, so why not this one if I so desire?
s
wait, I thought there is only TBA right now, which means the role you log in via TBA already defines the roles
@Azi I think you can config either the token role to be higher permission, or create a new role then a new set of tokens which will cover what you need on the role
b
restlets are expected to be used from something outside netsuite
all the other scripts are internal
the exception being externally available suitelets, which are noted as not being SuiteScript 2.x Suitelet Script Best Practices
👍 1
having an externally available suitelet would likely not pass BFN certification
s
such a suitelet can pass, but you have to prove there's no other choice.
and that you've programmed defensively, or something like that
t
BFN certification is for suiteapps on the marketplace. Definitely something to strive for but it won't affect 90% of people in this space
true news 1
d
Restlets are external? I didn’t know that.
Open in Slack
PreviousNext
Powered by