Afellow APEX developer and former APEX product manager (and my brother), Scott Spendolini, says in his security presentations, “Security is hard. If it’s easy then you’re doing it wrong.” Implementing security always needs to walk that fine line of convenience and irritation. Application security needs to be crafted so that the user can use the application but security exists at all levels without getting in the user’s way. Lucky for us, with APEX 5.1, setting up security is much easier than it was in the past.
When building application security, we all too often hear the phrase, “Well it has always been that way and ...