Runtime access determines if an API or web service call can run against an application table.

Access permissions can be set for the following access points.

Table 1. Runtime access points
Access points Description
Script API Any supported object or method call from the scoped system API such as a GlideRecord call.
Web services Any supported web service call such as a REST, JSON, or SOAP web service.

The system does not prevent you from creating API or web service calls to the application tables, rather it determines if the API or web service call is allowed to run against the application table. API or web service calls that violate the access permissions for an application table produce an error. For example, making a web service call to a protected application table produces a 403 Forbidden HTTP error.