Universal Containers requires that sensitive audit metric fields on a custom Compliance Audit object only appear on the record detail section when the Audit Status picklist is set to 'Under Review'. An administrator implements Dynamic Forms component visibility rules on the Lightning Record Page to satisfy this request. Which statement accurately describes the data security impact of this Dynamic Forms configuration?
- The visibility rules dynamically hide the fields on the Lightning Record Page UI, but users with Field-Level Security read access can still view or extract the field data via reports, list views, or API queries.Answer
- BThe visibility rules automatically enforce database-level security by restricting API and report access to the hidden fields whenever the Audit Status is not 'Under Review'.
- CThe visibility rules override existing Profile settings and Field-Level Security permissions to grant temporary read access to users who otherwise lack field permissions.
- DThe visibility rules alter data accessibility universally across the organization, removing the fields from standard report types and export tools.
Answer
Dynamic Forms component visibility rules control user interface rendering on Lightning Record Pages, but they do not enforce database security or restrict data access through APIs, reports, or list views.
Dynamic Forms component visibility rules are evaluated on the client browser when rendering a Lightning Record Page. They dynamically hide or reveal fields based on filter criteria, but they do not modify or enforce underlying database permissions. Users who have read access via Field-Level Security can still access the hidden field data through reports, list views, SOQL/REST API queries, or export tools.
Step-by-Step Solution
Key Concept
Dynamic Forms UI Component Visibility vs Field-Level Security (FLS)