Hello, Since access to get_local_roles by non-Manager user is unauthorised, could the script Base_getOwnerId have proxy Manager role by default. That way normal user can verify the ownership of the object, eg. in script. I think that would come in handy in many circumstances. Mikolaj