Universal Containers (UC) has requirement to expose a web service to their business partners. The web service will be used to allow each business partner to query UC's Salesforce instance to retrieve the status of orders.
The business partner should only be allowed access to orders for which the business partner is the fulfillment vendor. The Architect does not want the business partners to utilize the standard APIs and would prefer a custom API be developed. Which three design elements should the Architect consider in order to ensure the data security of the solution?
Choose 3 answers.
Recent Comments (The most recent comments are at the top.)
C,D,E.
If you use A with an integration user she can access any unauthorized data by using other IDs.
If every partner has a login user and a private OWD is used then the "with sharing" keywod will protect access.