Monday, February 16, 2004
Checking functional permissions from XML submission
The SENDING_APPLICATION_CHID element value is checked against the Trusted Source code table to see whether it is present. If it is, then functional permission checking is suspended as this is a trusted source. If it is not, then functional permissions are checked.
Of course, just submitting a value in the SENDING_APPLICATION_CHID is not particularly secure.