An entity field is a structured piece of data attached to an entity-a record representing something such as an order, customer, or product. Fields hold values like an order status, total, or shipping address, and applications use them to display information and carry out business workflows.
In cyber security, entity fields matter because access rules must protect both the record and its individual data or actions. A permission-check failure may let an unauthorized user view or change fields they should not control, potentially affecting order integrity or exposing sensitive information. Defenders should apply and test authorization checks across web forms, APIs, and other routes that read or modify entity fields, then review logs for unexpected changes.