Locked field using business rules is getting updated through API update

[Suchism]

I have set a business rule to lock a field using certain attribute condition. The rule is set at Entity level.

Which is working fine on the UI/form . But I am able to update it through api. Is this expected ? 

[EricRegnier · Accepted solution]

Hi @Suchism, yes this is by design. Lock/unlock action is only for form or subgrid (i.e. editable subgrid) and will not take affect even if scope is set to entity.

Cheers

[DavidJennaway]

To add to the previous answer, if you want to prevent changes to the field via the API, your options are:

1. Write a plugin to handle the logic, and throw an exception to prevent the change
2. Create a synchronous workflow to handle the logic, and cancel the process to prevent the change
3. Use field-level security. However, you can't attach conditional logic to this