Writing
Notes from building systems that hold real money and real people's data. The problems here are ones I have actually had to solve.
Loading…
Notes from building systems that hold real money and real people's data. The problems here are ones I have actually had to solve.
Loading…
3 Sept 20263 min read
Every tenant table carries the organisation, every query goes through one layer that puts it there, and a build-time check fails the build if application code ever reaches the database directly. The discipline is the design.
20 Aug 20263 min read
Hiding a button is not security. A permission model that survives contact with a real business needs one catalogue, enforcement in the service layer, and a short list of actions that only two people may ever perform.