DreamHouse Realty has the following requirements: A Visualforce controller that needs to be written with “Without Sharing” at the top level. Specific methods within the page need to enforce the user permissions for creating records and accessing certain fields. An Architect needs to ensure this requirement is enforced. Which two methods will be used to achieve this goal? (Choose two.)