UserImage.jpg
Pedro Pinela
19Views
3Comments
Solved
Entities - Public and Expose Read-only properties
Question
Reactive
Best Practices
Application Type
Reactive

Hi,

If I have one entity in a producer module set to public and the expose Read-only property set to 'Yes', can the consumer module modify the data using an SQL advance Query? If so, how can I protect against this?

1
0
22 Sep
Solution

It cannot modify. You can even try that: create a simple SQL query just for updating the table in another module and test... It will say that the entity is read-only.

See solution in context
2
0
22 Sep
Solution

This is an interesting question! 

I tried to go the extreme on this by copying the actual table name (e.g. OSUSR_0W2_ENTITY1) and crafting my insert statement inside a expand inline query parameter so that it would not block my query at compile, but outsystems checks for this even at runtime!

Safety!



See solution in context
1
0
22 Sep
Solution

It cannot modify. You can even try that: create a simple SQL query just for updating the table in another module and test... It will say that the entity is read-only.

2
0
22 Sep
Solution

This is an interesting question! 

I tried to go the extreme on this by copying the actual table name (e.g. OSUSR_0W2_ENTITY1) and crafting my insert statement inside a expand inline query parameter so that it would not block my query at compile, but outsystems checks for this even at runtime!

Safety!



1
0
22 Sep

Actually,

I think a saw in the past ways to get passed that particular check, but not for beginners and it would really show intent.  

So can developers accidentally do this against architecture, no, can somebody get passed it with intent, yes, I think so.

Dorine

0
0
22 Sep
Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.