In a system architecture, to what extent an admin user should have access to consumer resources?

Let’s say I’m building a system, similar to a very simple ecommerce.
Users can sign up as consumer and start buying products.
Purchases are then stored in the database together with the order status, shipping info, etc.
Now, in order to ma… Continue reading In a system architecture, to what extent an admin user should have access to consumer resources?

Prevention of User Tampering the API by Serverless clients which are in sync with the real world client

As we all know, never trust the client, when they send data to your server. However what if you prevent data manipulation by completely restructuring the architecture to something like the following:

Here as soon as the User tries to conn… Continue reading Prevention of User Tampering the API by Serverless clients which are in sync with the real world client