Who runs process for Processflow inbasket

unknown

We are running LSF9.0.1.11 with same level of processflow.
We have developed an .htm (javascript) for the inbasket display that resides in the inbasket/execs directory. This new .htm has both DME and AGS calls in it. This replaced a design studio .xml that was in the persistent data folder.

When I run the .htm with the AGS call to update, the user needs access to the form called by the AGS call while the .xml update did not.

Any clarification on who runs what would be very welcome!
Thanks in advance.