Question 780
A REST client needs filtering on a public product type but must never filter private margin columns. What should the SQL developer do FIRST to address the specific issue?
Explanation
Correct Answer
Configure entity fields, authorization and supported filter behavior to expose only permitted fields. This targets the primary issue because DAB entity projection and permissions determine the API data surface. Verification: A permitted category filter works but margin fields remain inaccessible. Prevent recurrence: Audit API surface after schema changes.
Incorrect Answers
Unbounded result sets waste bandwidth and can overload SQL and API memory.
Mapping a view can create a governed projection with narrower permissions than base tables.
DAB generates endpoints from explicit configuration rather than automatically exposing every table.