So let's say there's a page on the website that shows the admin all the messages that came in from the users since he last logged in.

And it's implemented on the mobile application, with checks in the app to stop this view from showing to normal users AND checks on the server based on the user's role (token-based system) to send back the admin data or not.

I had a convo with a colleague earlier about this and he insisted that implementing any admin features on a mobile app is bad practice, Is it?

  • What makes mobile special that there would be a different consideration?
    – schroeder
    Dec 4 '19 at 7:23
  • @schroeder I don't think there is a difference, but I was asking in fear that I'm missing something.
    – J.K
    Dec 4 '19 at 7:39
  • The difference here is that you are putting checks in the app, which can be discovered and bypassed. But you mitigated that problem.
    – schroeder
    Dec 4 '19 at 8:10
  • Is your colleague's concerns about security or UX? e.g. it's more difficult to perform admin functionality/display detailed admin settings on a phone than on a large desktop monitor with a mouse? If you're merely showing messages, that may be something very convenient for an admin to be able to check on their phone from anywhere instead of requiring them to get to a laptop. If the messages contain sensitive information and you're concerned that could leak if the admin's device is lost/stolen then you can look into MDM to help manage that.
    – milk
    Dec 4 '19 at 21:08

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.