Originally Posted by
Often1
But, for purposes of other threads, it's worth noting that DL can see exactly who changed any aspect of a PNR.
I'm wondering if that's why this particular incident was stopped. Perhaps the NRSA was twiddling around while the computer was logged in with the GA's account, making it look like the GA made the changes. When the GA saw what happened, he/she had to do something to avoid being falsely blamed (the GA may in that case be liable for a different policy violation of letting an other employee use their account, though).