You have the following X++ code that contains an SQL statement: Which two statements accurately describe the code? Each correct answer presents a complete solution.

The correct answer is C. The code does not enforce row-level security. D. The results variable only contains data from the legal entity in to which the user is logged. C: Record level security is not enforced on the Statement class. If data is exposed to the user, perform explicit security validation. Note: * ::revertAssert Causes a previous call to the CodeAccessPermission.assert and CodeAccessPermission::assert- Multiple methods to be…

Manage Data and Security

Question

You have the following X++ code that contains an SQL statement:

Which two statements accurately describe the code? Each correct answer presents a complete solution.

Exhibit

Options

AThe code does not enforce field-level security.
BThe results variable only contains data from the partition into which the user is logged.
CThe code does not enforce row-level security.
DThe results variable only contains data from the legal entity in to which the user is logged.

How the community answered

(50 responses)

A
20% (10)
B
8% (4)
C
72% (36)

Explanation

C: Record level security is not enforced on the Statement class. If data is exposed to the user, perform explicit security validation. Note: * ::revertAssert Causes a previous call to the CodeAccessPermission.assert and CodeAccessPermission::assert- Multiple methods to be removed and no longer in effect. If users control input to the executeQuery method, an SQL injection threat can occur. Therefore, this method runs under Code Access Security.

Topics

#row-level security#data partitions#legal entity#X++ SQL security

Community Discussion

No community discussion yet for this question.

Full MB6-704 Practice