A page condition hides a confidential salary field from nonmanagers. Which statement is correct?

1. A field template's color determines database privileges
2. Backend authorization must still protect the salary data
3. Hidden fields are automatically inaccessible through every API
4. Client-side role text is sufficient proof of entitlement