Sharing-and-Visibility-Architect Exam Dumps | Universal Containers (UC) has a requirement to expose a web service to their business partners. The web

<< Prev Question Next Question >>

Question 68/110

Universal Containers (UC) has a requirement to expose a web service to their business partners. The web service will be used to allow each business partner to query UC's Salesforce instance to retrieve the status of orders. The business partner should only be allowed access to orders for which the business partner is the fulfillment vendor. The Architect does not want the business partners to utilize the standard APIs and would prefer a custom API be developed. Which three design elements should the Architect consider in order to ensure the data security of the solution?
Choose 3 answers

A. Query the Orders object with Dynamic SOQL based upon the fulfillment ID.

B. Set the Orders object's sharing settings to Private in the Org-Wide Defaults

C. Provide each partner with their own Salesforce login set to API Enabled on the profile.

D. Develop a custom Apex web service with a fulfillment ID input attribute

E. Develop a custom Apex web service using the "With Sharing" keyword.

Recent Comments (The most recent comments are at the top.)

Sky - Apr 15, 2024

B, C, E

OWD to private (B) + with sharing (E) + own user that is owner of the records (C)

(A) dyanmic SOQL does not help with sharing and record access
(D) fullfillment ID as an input does not help if any vendor can pass fullfillment ID that belongs to different vendor and therefore seeing their records.

Sky - Apr 15, 2024

B, C, E

OWD to private + with sharing + own user that is owner of the records
dyanmic SOQL (A) does not help with sharing and record access
fullfillment ID as an input (D) does not help if any vendor can pass fullfillment ID that belongs to different vendor (and therefore seeing their records)

test - Mar 28, 2024

B. Set the Orders object's sharing settings to Private in the Org-Wide Defaults
Setting the Orders object to Private ensures that by default, access is restricted. Users can't see each other's order records unless explicit sharing rules are in place or access is granted through roles, permissions, or programmatic sharing. This is a foundational step in securing data access at the organization level, ensuring that access to order data is tightly controlled.

D. Develop a custom Apex web service with a fulfillment ID input attribute
A custom Apex web service allows for the creation of a tailored API endpoint that business partners can use to query order statuses. By requiring the fulfillment ID as an input attribute, the web service can ensure that partners only query orders relevant to them. This approach allows for precise control over data access and ensures that the query logic respects business rules regarding data visibility.

E. Develop a custom Apex web service using the "With Sharing" keyword.
Using the "With Sharing" keyword when developing the Apex web service enforces the sharing rules and security settings defined in Salesforce. This means that the code runs with the same access rights as the user who is making the call to the web service. It's crucial for maintaining the principle of least privilege, ensuring that the web service respects organizational security policies, and only exposes data that the calling user is authorized to access....

Question 68/110

Recent Comments (The most recent comments are at the top.)

LEAVE A REPLY

Download PDF File