topic supportsTruncate flag in AGOL hosted feature service not respected in ArcGIS Online Questions https://community.esri.com/t5/arcgis-online-questions/supportstruncate-flag-in-agol-hosted-feature/m-p/414253#M20736 <HTML><HEAD></HEAD><BODY><P>We have discovered that the supportsTruncate flag in the admin layer definition is not being respected as it is possible to use&nbsp;an admin REST truncate call to truncate data that has that flag set to false.</P><P></P><P><IMG alt="supportsTruncate flag in admin layer definition" class="jive-emoji image-1 jive-image j-img-original" src="https://community.esri.com/legacyfs/online/496016_supportsTruncate.PNG" /></P><P></P><P>In addition, it is possible to use the admin REST truncate call on an AGOL hosted feature service&nbsp;with sync enabled despite the REST documentation saying otherwise.</P><P></P><P><IMG alt="REST truncate documentation" class="jive-emoji jive-image image-2 j-img-original" src="https://community.esri.com/legacyfs/online/496017_rest_truncate.PNG" /></P><P></P><P>We also discovered that FME has an option in the AGOL writer that enables truncate and insert that seems to use the admin REST truncate call as the OBJECTIDs are reset to 1.</P><P></P><P>This is extremely concerning as in a database only the schema owner can truncate the data, but the admin truncate REST call is potentially accessible to several users and if the supportsTruncate flag is not respected it is possible for users to inadvertently empty datasets in AGOL.</P></BODY></HTML> Tue, 09 Jun 2020 15:46:11 GMT BillSouter2 2020-06-09T15:46:11Z supportsTruncate flag in AGOL hosted feature service not respected https://community.esri.com/t5/arcgis-online-questions/supportstruncate-flag-in-agol-hosted-feature/m-p/414253#M20736 <HTML><HEAD></HEAD><BODY><P>We have discovered that the supportsTruncate flag in the admin layer definition is not being respected as it is possible to use&nbsp;an admin REST truncate call to truncate data that has that flag set to false.</P><P></P><P><IMG alt="supportsTruncate flag in admin layer definition" class="jive-emoji image-1 jive-image j-img-original" src="https://community.esri.com/legacyfs/online/496016_supportsTruncate.PNG" /></P><P></P><P>In addition, it is possible to use the admin REST truncate call on an AGOL hosted feature service&nbsp;with sync enabled despite the REST documentation saying otherwise.</P><P></P><P><IMG alt="REST truncate documentation" class="jive-emoji jive-image image-2 j-img-original" src="https://community.esri.com/legacyfs/online/496017_rest_truncate.PNG" /></P><P></P><P>We also discovered that FME has an option in the AGOL writer that enables truncate and insert that seems to use the admin REST truncate call as the OBJECTIDs are reset to 1.</P><P></P><P>This is extremely concerning as in a database only the schema owner can truncate the data, but the admin truncate REST call is potentially accessible to several users and if the supportsTruncate flag is not respected it is possible for users to inadvertently empty datasets in AGOL.</P></BODY></HTML> Tue, 09 Jun 2020 15:46:11 GMT https://community.esri.com/t5/arcgis-online-questions/supportstruncate-flag-in-agol-hosted-feature/m-p/414253#M20736 BillSouter2 2020-06-09T15:46:11Z