Cheffusion Technologies
Insights

Written for the people who will maintain it.

Notes on the decisions that turn out to matter later: how a system is shaped, what it costs to change, and which shortcuts are paid for twice. Nothing here is gated.

Articles
1 published
Subjects
6 categories
Access
No sign-up, no download form

Filter by subject

Practices, threat models and the failures worth learning from.

01FEATURED

Hiding the button is not authorisation

Every few months we review an application where permissions are enforced by not rendering the delete button. Here is the failure mode, and the pattern that actually works.

Read the article
Subject
Security
Length
2 min read
Published
August 29, 2026
Written by
Content Manager
Tags
authorisationrbaccode-review