This is similar to https://ideas.k2.com/ideas/APIT-I-1413, but from a governance perspective. Testing SmartObjects provide is a big problem today. SmartObject Service Tester tool is a security risk as there are almost no security checks on it. It is also a thick client tool so doesn't lend itself well as an end user tool for an almost thin client only platform.

The only feasible alternative is Management, since creating views for every SmartObject that one wants to test is not a realistic option (especially when working with Enterprise level customers). But Admin permissions are again required in order to execute SmartObjects. There should be an easy to use and accessible way to execute SmartObjects, while still applying the Authorization Framework checks and balances.