If a business application has inadequate security, it can wreak havoc on an organization. There have been plenty of discussions on the importance of tight security, particularly in the last year or so. While security must be tight in modern business applications, it is important that it fits in a way that eliminates or minimizes any impact on productivity. Many applications have wild pendulum swings from being far too open to being far too closed. Additionally, security is something that takes care and feeding over time since roles changes, users come and go, and the needs of an organization and its business processes change. Last, but certainly not least, security needs to be implemented in a
unified model through all layers of the software. That is, the security in the user interface, business logic and database must all match, and must stay in sync over time. This is in fact one of the greatest administrative headaches that face administrators and application developers in many development shops.
Modern systems need to have a unified model with a single point of administration. This means that a system administrator can make changes to security in a single place, easily, and these changes automatically have impact on all layers of the software infrastructure from the database through the user experience. Many development shops ignore this approach as it does normally(see note) take extra time to invest in this level of security infrastructure. However, if you don't have a unified security model in place, the long term total cost of ownership will be much higher. Even incremental changes will have to be managed in multiple places and typically by different people (e.g. DBA/Sys Admin/Developers for different layers). In addition to the higher long term cost, the lack of a truly unified security architecture will likely increase security vulnerabilities and create quality problems. This is a great example in application development where a bit of additional infrastructure on the front end will provide for big usability benefits and cost savings over time.
Note: While the importance of this security model applies to all business applications in any environment, our Aptify RAD Platform automates this entire process and actually reduces the amount of time it takes to establish a unified security model in any business application.