BC Observatoryunofficial, made by waldo
code change · fixAL Developmentofficial - Microsoftreviewed - checked by Opus

#92 Correct security and privacy knowledge guidance

Security and privacy knowledge articles were corrected to align with current Business Central APIs and behavior, including fixes for SecretText HTTP guidance, error telemetry semantics, field data classification, and consent handling.

Open in Claude92.mdPull request #92

Pull request · merged into main on 2026-07-14 by JesperSchulz · 34 files (+192 -153), 34 AL · fix · tier official · reviewed (checked by Opus)

What changed

  • SecretText HTTP guidance now uses HttpRequestMessage.SetSecretRequestUri with HttpClient.Send instead of an API that does not exist
  • Error telemetry guidance realigned with AA0231 and current RT0030 behavior for Label/TextConst versus dynamic first arguments
  • Corrected field data classification, Privacy Notice registration and consent for custom integrations
  • SecretText.Unwrap is described as on-premises only, and intentional ValidateTableRelation = false handling is clarified
  • Fixed secret interpolation and gated BC 23/24 APIs accurately

AL objects touched

  • microsoft/knowledge/privacy/avoid-strsubstno-prebuild-before-error.bad.al: modified, not in the BC? snapshot
  • microsoft/knowledge/privacy/avoid-strsubstno-prebuild-before-error.md: modified, not in the BC? snapshot
  • microsoft/knowledge/privacy/error-direct-substitution-safe-for-telemetry.md: modified, not in the BC? snapshot
  • microsoft/knowledge/privacy/error-vs-message-telemetry-logging.md: modified, not in the BC? snapshot
  • microsoft/knowledge/privacy/getlasterrortext-customer-content-in-errors.bad.al: modified, not in the BC? snapshot
  • microsoft/knowledge/privacy/getlasterrortext-customer-content-in-errors.good.al: modified, not in the BC? snapshot
  • microsoft/knowledge/privacy/getlasterrortext-customer-content-in-errors.md: modified, not in the BC? snapshot
  • microsoft/knowledge/privacy/privacy-notice-consent-for-external-data-transfer.bad.al: modified, not in the BC? snapshot
  • microsoft/knowledge/privacy/privacy-notice-consent-for-external-data-transfer.good.al: modified, not in the BC? snapshot
  • microsoft/knowledge/privacy/privacy-notice-consent-for-external-data-transfer.md: modified, not in the BC? snapshot
  • microsoft/knowledge/privacy/register-integration-in-privacy-notice-registrations.good.al: modified, not in the BC? snapshot
  • microsoft/knowledge/privacy/register-integration-in-privacy-notice-registrations.md: modified, not in the BC? snapshot
  • microsoft/knowledge/privacy/table-level-data-classification-cascades.good.al: modified, not in the BC? snapshot
  • microsoft/knowledge/privacy/table-level-data-classification-cascades.md: modified, not in the BC? snapshot
  • microsoft/knowledge/security/isolatedstorage-access-must-be-local-or-internal.good.al: modified, not in the BC? snapshot
  • microsoft/knowledge/security/isolatedstorage-access-must-be-local-or-internal.md: modified, not in the BC? snapshot
  • microsoft/knowledge/security/isolatedstorage-datascope-module-vs-company.bad.al: modified, not in the BC? snapshot
  • microsoft/knowledge/security/isolatedstorage-datascope-module-vs-company.good.al: modified, not in the BC? snapshot
  • microsoft/knowledge/security/isolatedstorage-datascope-module-vs-company.md: modified, not in the BC? snapshot
  • microsoft/knowledge/security/isolatedstorage-setencrypted-for-sensitive-values.good.al: modified, not in the BC? snapshot
  • microsoft/knowledge/security/isolatedstorage-setencrypted-for-sensitive-values.md: modified, not in the BC? snapshot
  • microsoft/knowledge/security/nondebuggable-required-when-unwrapping-secrettext.bad.al: modified, not in the BC? snapshot
  • microsoft/knowledge/security/nondebuggable-required-when-unwrapping-secrettext.good.al: modified, not in the BC? snapshot
  • microsoft/knowledge/security/nondebuggable-required-when-unwrapping-secrettext.md: modified, not in the BC? snapshot
  • microsoft/knowledge/security/secretstrsubstno-for-composing-secrets.bad.al: modified, not in the BC? snapshot
  • microsoft/knowledge/security/secretstrsubstno-for-composing-secrets.good.al: modified, not in the BC? snapshot
  • microsoft/knowledge/security/secretstrsubstno-for-composing-secrets.md: modified, not in the BC? snapshot
  • microsoft/knowledge/security/secrettext-for-credentials.good.al: modified, not in the BC? snapshot
  • microsoft/knowledge/security/secrettext-for-credentials.md: modified, not in the BC? snapshot
  • microsoft/knowledge/security/secrettext-with-httpclient.bad.al: modified, not in the BC? snapshot
  • microsoft/knowledge/security/secrettext-with-httpclient.good.al: modified, not in the BC? snapshot
  • microsoft/knowledge/security/secrettext-with-httpclient.md: modified, not in the BC? snapshot
  • microsoft/knowledge/security/validatetablerelation-false-on-user-input.good.al: modified, not in the BC? snapshot
  • microsoft/knowledge/security/validatetablerelation-false-on-user-input.md: modified, not in the BC? snapshot

Context

  • Systems: development, administration

Source: metadata of a merged pull request in microsoft/BCQuality (bcquality): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).