28 posts
Hiding an action in the interface does not stop someone from performing it. Here is how we check permissions on every page, action, download and backg...
A setting can live in the database, in server environment values or in a default configuration file. Here is the order we check them in and why it mat...
When records come from another system, keeping their original identifiers makes imports safe to repeat and relationships possible to rebuild. Here is...
Some of our code runs on public pages with no customer account at all. Here is how we write shared code that works safely in both places without crash...