3 ms·
Low code like powerapps however solve a myriad of problems for regular users but I agree with the post. The one area I find a bit concerning is governance/mana
by _8j50 4y ago
Low code like powerapps however solve a myriad of problems for regular users but I agree with the post.
The one area I find a bit concerning is governance/management around the data and permissions low-code apps ask. In a powerapps context for example, the app might ask permissions to read all your onedrive, sharepoint or email and it may even have a good reason to do so but now that means if the regular user who composed it gets compromised, threat actors get all that data from the user's of the powerapp.
I am guessing other low code frameworks also work with some business or user data. Low code means easy to compose and less low level coding error related vulns but you can still have a vulnerable low code app.
- giraffe_lady 4y agoYeah the only low code I respect is excel.
- YurgenJurgensen 4y agoIsn't it even worse than "get all of the data"? Don't you also gain the ability to impersonate anyone who clicks through to the app?
- _8j50 4y agoDelegatedimpersonation is possible in an AAD context so technially they can request that but I'm not sure the lowcode UI would let them.