The script access is conducted in two steps.

1. Static Document Link
   document Userscripts Context Service

   : Calculates all applicable scripts and returns their links to the user's browser for execution

2. Static Document Link
   document Userscripts Service

   : Serve an individual script, which is cached for performance reasons

The access privileges are not checked by the context service. Only the script service checks that the access privileges are properly set.

On accessing the script other validation checks than privilege checks are not executed. These checks are only conducted when the script is stored to the database (either created or updated).

The original script URL is substituted with a local URL. Therefore the client will not access the backend system hosting the scripts.