It is now a general requirement to mask social security numbers, typically displaying 'XXX-XX-1234' instead of the full value. QBO 3's FieldAttribute now includes a Mask string that can be used to drive such masking for any field when generating a SQL Select clause.
In Contact.Fields.cs, we now have:
which in turn causes the standard Select, SelectBasic, Search, and other statements to produce:
Defining a mask in the application tier simplifies the developer's efforts to ensure that fields such as SSN are only displayed when we intend to display them. Existing XSLTs that already display the calcualted USSSN4 need not be changed. For example:
is equivalent to:
Either method can be used.