Question 220
At fictional Granite Telecom, the Business Central development team is supporting field equipment billing and reviewing external-service integration during a tenant acceptance test (MB820-6.2-191). The observed development issue is that a SaaS integration makes destructive data changes through an OData endpoint with no caller authorization review. Which recurring engineering check would best prevent this issue from returning?
Explanation
Correct Answer
The ongoing check is to run negative authorization tests against API endpoints. This helps detect recurrence when a SaaS integration makes destructive data changes through an OData endpoint with no caller authorization review. The associated correction is to expose only approved actions and enforce permissions and validation at the service boundary; a confirming result is that unauthorized requests are denied even when callers know the endpoint URL.
Incorrect Answers
“Audit API field lists and permission behavior after schema changes” concerns the alternative task “expose only the minimal approved fields and apply entitlement and permission rules”, but the stated failure is that a SaaS integration makes destructive data changes through an OData endpoint with no caller authorization review. The required measure is to run negative authorization tests against API endpoints.
The proposed “Diff published schemas before deployment” tests a different control: preserve compatible contracts or introduce a deliberate versioned API and migration path. The reported condition is that a SaaS integration makes destructive data changes through an OData endpoint with no caller authorization review; the more direct action is to run negative authorization tests against API endpoints.
“Test data freshness and consistency assumptions before enabling read scale-out” supports the separate task “evaluate supported read scale-out patterns for appropriate read workloads without compromising consistency needs”, not the reported problem: a SaaS integration makes destructive data changes through an OData endpoint with no caller authorization review. This case instead calls for “Run negative authorization tests against API endpoints”.