Dynamics 365 Business Central: Development - AL developers can turn indexes on/off in AL code.

🚨 The Signal: Dynamics 365 Business Central developers can now programmatically enable or disable database indexes. This allows application publishers to manage database performance and structure directly within their AL code, potentially impacting data integrity and access controls if not managed securely.

The Impact

Developers are affected by new capabilities, introducing a potential security risk if index management is misused, leading to data integrity issues or performance degradation.

• Developers: New capabilities require secure coding practices to prevent vulnerabilities.
• Security Teams: Need to review application code for secure index management.
• Data Owners: Risk of data integrity issues if indexes are improperly managed.
• Compliance Teams: Potential for non-compliance with data integrity controls if not monitored.

The Action

1. Review existing Dynamics 365 Business Central AL code for index management practices.
2. Implement secure coding guidelines for AL developers regarding index manipulation.
3. Conduct security assessments of new applications leveraging this capability.
4. Ensure change management processes include review of index-altering code changes.
5. Monitor database performance and integrity for unexpected changes post-deployment.

Domain: Other · Impact: medium · Workload: Other