Share
Report
188When writing AL code in Business Central, I have specific scenarios where standard users must execute posting routines that insert, modify, or delete data in restricted tables, but they only hold Indirect permissions to those tables via their assigned Permission Sets.
What are the best practices for utilizing the Permissions property on a codeunit (e.g., Permissions = tabledata MyTable = rimd;) to securely execute these transactions? How do you architect these codeunits to ensure you are strictly satisfying the indirect permission requirement for a specific business process, rather than inadvertently creating a backdoor that bypasses the license-level restriction if the object is called maliciously or from an unsupported application area?
Categories:
I have the same question (0)
All responses (
Answers (
