Category: Performance
-
ACL & Query Business Rules: Why You Can’t Pick Just One
Every now and then, a well-meaning developer points to a Query Business Rule and says: “We’ve locked it down, we’re good.” On the surface, it looks true. The list only shows the user their own records. The data seems restricted. Job done, right? Not quite. What that developer has done is like putting up a…