I think it would be quite good to have a lesson or a basic resource that is specific to allow us to pen-test our own apps and related privacy settings, as if we were a hacker. I would like to be able to understand + test the fields that are viewable (or not viewable) with my privacy settings to see…

Well, one thing you can do is create a page that has a repeating group with a search that returns every thing / every field for a given type. Then you can view that page as different users – logged in, logged out, etc, to see what each user can see. To avoid making it too easy for other people to …

Question: Would the combination of (1) redirect when not logged in, (2) workflow restrictions, and (3) displaying data with constraints (i.e. A repeating group of Post where Post_Creator = Current User) be enough to prevent unrestricted data viewing? Or would we need to implement an additional secur…

I think that more emphasis on security would be a benefit especially for a larger app or a SaaS client. Clear documentation or a lesson would be very good to have along with the ability to search and display things as or even “preview” the security settings themselves… All it would take is a standa…

Privacy settings are necessary to protect data against unauthorized viewing, because (3) only offers protection against non-technical users… a sufficiently technical hacker could run the queries without the restrictions. Privacy settings are a way of applying constraints to every single search that…

We’re actually working on a feature to let you view the app as any one of your users, to make it easy to preview various privacy settings. I agree with “I think that more emphasis on security would be a benefit especially for a larger app or a SaaS client”. We try not to hit new users with too muc…

Yes. Opens me up to big liability if I dont do something right. Especially considering I’m handling personal information and payment/payout information…

We just deployed the “Run as” feature. See [image] [New Feature] Running an app as a given user Announcements We just deployed the option to run the app as one of our users. When you’re in the database view (Data Tab -> App Data section), you can see a new column when you…

FYI, I use a service called Test Anywhere . I create tests for each of those accounts and then can run them automatically to make certain each user accesses what they are supposed to correctly. One of the best features I appreciate is the ability to easily create tests and record videos of whenever a…

Hi, I will soon have the same need. I wanted to know how this situation evolved. Is there an easier way (or plugin) that allows us to test the security settings of our apps?

Penetration Testing Lesson On Bubble

Idea

emmanuel August 8, 2016, 10:45pm 8

We just deployed the “Run as” feature.

See

3 Likes

Topic		Replies	Views
Is The APP Totally Open Without Any Privacy Settings Set? Need help	12	2080	August 7, 2016
Are your apps secure? We all depend on it Tips	17	9376	July 20, 2021
The new security dashboard behavior Need help	35	271	January 7, 2026
How Public data are visible? Questions	11	1366	July 12, 2023
Understand Security features - can view but not edit Questions	6	1285	April 23, 2022

Penetration Testing Lesson On Bubble

Related topics