hello. i have a suitelet that acts like a form. i need to run on external url. it has a client script that has an invoice lookup. but the client script doesn't have permission. is it possible to set a client script to run as admin? I've attached a small snippet of the look up. it runs on fieldChanged event
d
Dominic B
05/19/2022, 1:03 PM
A client script running externally as admin would almost certainly result in a huge security hole. You need to create a server side script to return strictly controlled data (suitelet or SSP) and fetch with an ajax request from within the client.
Dominic B
05/19/2022, 1:05 PM
Ideally, you'll need to add in some further security, as anyone could potentially post random order numbers to the script and see other customer's data.
r
Raffy Sucilan
05/19/2022, 4:20 PM
Thanks Dominic, makes sense when looking at it that way. I'll do the validations maybe on the submit instead. Not as elegant as client side, but should work just fine.