Role-based Security Flashcards
Which action would you use to verify if a user has a specific role in a server-side logic flow?
A) CheckRole
B) AssignRole
C) VerifyRole
D) GrantRole
A
In Service Studio, where can you find the built-in roles Anonymous and Registered?
A) In the Logic tab under the Roles folder
B) In the Data tab under the Users module
C) In the Interface tab under the Widgets section
D) In the Database tab
A
What happens if only the Manager role is selected for a screen?
A) Only users with the Manager role can access the screen
B) All users can access the screen
C) Only registered users can access the screen
D) Users with the Anonymous role can access the screen
A
If a screen has the Anonymous role selected, what does this imply?
A) Only logged-in users can access the screen
B) Any user, even without login, can access the screen
C) Only admins can access the screen
D) The screen is locked for all users
B
Which action allows you to assign a role to a user in OutSystems logic?
A) AssignRole
B) GrantRole
C) CheckRole
D) RevokeRole
B
How do you manually assign a role to a user in the Users application?
A) By using the GrantRole action in the screen logic
B) By selecting the role from the Roles section in the user details page
C) By setting the role in the Application interface
D) By modifying the database directly
B
How can you configure a screen to restrict access only to Manager and Employee roles?
A) By checking both Manager and Employee roles in the Screen Roles property
B) By adding a CheckRole action for both roles
C) By disabling all other roles in the Screen interface
D) By removing access for other users in the Roles module
A
When assigning roles to a user in the Users application, how can you identify roles across different modules?
A) By checking the Role description
B) By looking at the Module name next to the role in the assignment field
C) By accessing the Roles folder in Service Studio
D) By adding roles in the Logic tab
B
In the logic flow for Add Manager, what happens if the Employee already has the Manager role?
A) The role is granted again
B) No action is required, and the flow ends
C) The role is revoked
D) The user is prompted to confirm the role assignment
B
What happens when the GrantRole action is called inside a logic flow?
A) The user is checked for permissions
B) The role is assigned to the user for that session only
C) The role is permanently granted to the user
D) The screen refreshes to show updated permissions
B
How do you check if a user has the Manager role before allowing them to create or update an employee in the database?
A) Use the GrantRole action before performing the operation
B) Add a CheckRole action before executing the server action
C) Use the RevokeRole action after the operation
D) Assign the role during the database update
B
What should be done after adding a new Role in Service Studio?
A) Restart the server
B) Publish the module using the 1-Click Publish button
C) Assign the role to a user automatically
D) Refresh the database connection
B
How can the EmployeeDetail screen be restricted so that only users with the Manager role can access it?
A) By removing access for all other roles
B) By unchecking all roles except Manager in the Screen Roles property
C) By adding a CheckRole action in the screen’s logic flow
D) By adding a custom authorization script
B
What is the purpose of the Success parameter in the Save On Click action when updating an employee’s details?
A) To indicate whether the role has been granted
B) To determine if the user has been authenticated
C) To return the result of the operation and indicate if it was successful
D) To revoke permissions if the update fails
C
Considering the built-in Role Actions, which of the following options is false?
A. The CheckRole Action checks if a user has that particular Role.
B. The GrantRole Action allows to grant a Role to a user programmatically.
C. The RevokeRole Action allows to remove a Role from a user programmatically.
D. The CreateUserWithRole Action creates an end-user and assigns it the Role.
D.
This Action does not exist. This is actually a two step operation: create the user, and assign a role to the user.
