4 Apr
2006
4 Apr
'06
2:28 a.m.
Rob Thorne wrote:
But displaying content that is sensitive without checking access at all is a problem, and potentially, it is more serious than occasionally printing irregular numbers of records in a batch. If the information is sufficiently sensitive, even the loss of performance might be a reasonable tradeoff.
That's why node acts on db_rewrite_sql. Security *is* checked.