bcquality/microsoft/knowledge/web-services/disable-write-operations-on-read-only-api-pages.bad.al

// Intended for read-only consumption, but the CRUD guards are omitted. With
// InsertAllowed/ModifyAllowed/DeleteAllowed left at their writable defaults the
// endpoint silently accepts POST, PATCH, and DELETE, so a client can mutate or
// remove ledger data this API was never meant to expose for writing.
page 50357 "WS Read Only Bad"
{
    PageType = API;
    APIPublisher = 'contoso';
    APIGroup = 'reporting';
    APIVersion = 'v1.0';
    EntityName = 'customerLedgerEntry';
    EntitySetName = 'customerLedgerEntries';
    ODataKeyFields = SystemId;
    SourceTable = "Cust. Ledger Entry";

    layout
    {
        area(content)
        {
            repeater(records)
            {
                field(id; Rec.SystemId)
                {
                    Caption = 'id';
                    Editable = false;
                }
                field(entryNumber; Rec."Entry No.")
                {
                    Caption = 'entryNumber';
                }
                field(postingDate; Rec."Posting Date")
                {
                    Caption = 'postingDate';
                }
            }
        }
    }
}