Scripting in scoped apps
Scoped applications represent a fresh start for ServiceNow. Application scope, introduced in the previous chapter, provides a bubble around each app, very carefully controlling what it can do.
Note
Almost all the code in this book is for our Hotel application. All the scripting functionality discussed, unless indicated otherwise, uses the scoped API.
Without scoping, when you run a server-side script, you have access to the whole database. Remember the warning when you ran a background script? You can easily delete every record in the user table. Your boss probably won't be happy if he can't log in to run some reports.
In many regards, scripting outside of a scoped application is like the Wild West: there is an "anything goes" attitude, where your clever moves might result in a gold mine-or the sheriff may take offence to your attitude. There are numerous clever tricks letting you access deep, dark parts of the platform, but this often results in relying on functionality...