sanity check. If there's a Client Script that has to touch another record that not all Role's have access to, then the only way to ensure it runs without a permission error is 1. Have the Client Script call a Suitelet, which executes as Admin 2. Move the business logic out of the Client Script into a User Event if able, which also executes as Admin

3. give all roles permissions to that record 😛

you just made me shudder because I've had to explain to management why #3 is a terrible idea 😄