Skip to main content
Information Security

Return to Question

acronyms must be in uppercase
Source Link
edit approved Nov 7, 2017 at 13:33
Alexandre Neukirchen
edit approved Nov 7, 2017 at 13:33
Alexandre Neukirchen
  • 193
  • 2
  • 4
  • 16

How do javascriptJavaScript access control libraries work;work and is a client solution not a security threat?

As a complete beginner in this area I am looking at various Access Control libraries for my javascriptJavaScript webapp (Vue.js PWA). I do not know if understand things correctly but it looks like there are libraries focusing on the backend side, and others on the client side (and a few that can be used on both).

This library e.g. has (by far) most github stars and seems to me a 'backend side solution':

'Client side solutions' e.g.:

My question is twofold: 

  1. isIs my division into backend vs client solutions correct? 
  2. whenWhen you have a client solution which using a router hides certain content, is this not a major security risk as the query brought all data (including 'classified' data) to local memory of the client. Can this not easily be compromised?

How do javascript access control libraries work; and is a client solution not a security threat?

As a complete beginner in this area I am looking at various Access Control libraries for my javascript webapp (Vue.js PWA). I do not know if understand things correctly but it looks like there are libraries focusing on the backend side, and others on the client side (and a few that can be used on both).

This library e.g. has (by far) most github stars and seems to me a 'backend side solution':

'Client side solutions' e.g.:

My question is twofold:

  1. is my division into backend vs client solutions correct?
  2. when you have a client solution which using a router hides certain content, is this not a major security risk as the query brought all data (including 'classified' data) to local memory of the client. Can this not easily be compromised?

How do JavaScript access control libraries work and is a client solution not a security threat?

As a complete beginner in this area I am looking at various Access Control libraries for my JavaScript webapp (Vue.js PWA). I do not know if understand things correctly but it looks like there are libraries focusing on the backend side, and others on the client side (and a few that can be used on both).

This library e.g. has (by far) most github stars and seems to me a 'backend side solution':

'Client side solutions' e.g.:

My question is twofold: 

  1. Is my division into backend vs client solutions correct? 
  2. When you have a client solution which using a router hides certain content, is this not a major security risk as the query brought all data (including 'classified' data) to local memory of the client. Can this not easily be compromised?
Source Link
musicformellons
musicformellons
  • 123
  • 4

How do javascript access control libraries work; and is a client solution not a security threat?

As a complete beginner in this area I am looking at various Access Control libraries for my javascript webapp (Vue.js PWA). I do not know if understand things correctly but it looks like there are libraries focusing on the backend side, and others on the client side (and a few that can be used on both).

This library e.g. has (by far) most github stars and seems to me a 'backend side solution':

'Client side solutions' e.g.:

My question is twofold:

  1. is my division into backend vs client solutions correct?
  2. when you have a client solution which using a router hides certain content, is this not a major security risk as the query brought all data (including 'classified' data) to local memory of the client. Can this not easily be compromised?