Which server-side scripting methods are used for access control and are server-side only?

Which server-side scripting methods are used for access control and are server-side only?

• A. gs.hasRole() and current.isNewRecord()
• B. g_form.GetValue()
• C. gs.log()
• D. current.isNewRecord()

Answer: (A)

Access control decisions must be enforced on the server, so client-side manipulations can’t bypass them. The two server-side options that fit this purpose are gs.hasRole() and current.isNewRecord(). gs.hasRole() checks whether the currently authenticated user possesses a specific role, which is a fundamental way to grant or restrict access in ACLs or server-side rules. current.isNewRecord() is a GlideRecord method used in server scripts to determine if the record being dealt with hasn’t been saved yet, allowing you to apply different access logic for new versus existing records. Together, they provide server-side checks that control access reliably. In contrast, g_form.GetValue() runs on the client form and can be bypassed, and gs.log() is for logging rather than deciding access.

Access control decisions must be enforced on the server, so client-side manipulations can’t bypass them. The two server-side options that fit this purpose are gs.hasRole() and current.isNewRecord(). gs.hasRole() checks whether the currently authenticated user possesses a specific role, which is a fundamental way to grant or restrict access in ACLs or server-side rules. current.isNewRecord() is a GlideRecord method used in server scripts to determine if the record being dealt with hasn’t been saved yet, allowing you to apply different access logic for new versus existing records. Together, they provide server-side checks that control access reliably. In contrast, g_form.GetValue() runs on the client form and can be bypassed, and gs.log() is for logging rather than deciding access.