Cheffusion Technologies
Insights

Written for the people who will maintain it.

Notes on the decisions that turn out to matter later: how a system is shaped, what it costs to change, and which shortcuts are paid for twice. Nothing here is gated.

Articles
1 published
Subjects
6 categories
Access
No sign-up, no download form

Filter by subject

Practices, threat models and the failures worth learning from.

01FEATURED

Hiding the button is not authorisation

A pattern seen in many applications: permissions enforced by not rendering the delete button. Here is the failure mode, and the pattern that actually works.

Read the article
Subject
Security
Length
2 min read
Published
September 8, 2026
Tags
authorisationrbaccode-review