# \#security **URL:** https://community.appfarm.io/tag/security/27.md [Latest](https://community.appfarm.io/latest.md) · [Categories](https://community.appfarm.io/categories.md) · [Tags](https://community.appfarm.io/tags.md) --- ## [Missing required permissions to update account](https://community.appfarm.io/t/missing-required-permissions-to-update-account/1958)
**Author:** [@Preben](https://community.appfarm.io/u/Preben)\ **Replies:** 3\ **Last updated:** [August 13, 2025, 7:45am UTC](https://community.appfarm.io/t/missing-required-permissions-to-update-account/1958 "2025-08-13T07:45:43Z")
Hi, I’m struggling with a permission issue. As I have an action in one app that creates a user or updates the user if it exists. When trying to update an existing using a custom role, I get the error message “Missing r… --- ## [BankID login and populating personal information in addition to User object](https://community.appfarm.io/t/bankid-login-and-populating-personal-information-in-addition-to-user-object/638)
**Author:** [@Sondre](https://community.appfarm.io/u/Sondre)\ **Replies:** 3\ **Last updated:** [April 22, 2025, 10:53am UTC](https://community.appfarm.io/t/bankid-login-and-populating-personal-information-in-addition-to-user-object/638 "2025-04-22T10:53:44Z")
Hey, We have a case where we want to use a BankID Criipto login to populate User and Person object with more attributes than the User object can hold. Say socialno or birthdate. We assume that the bult in custom login … --- ## [Docs update: Guide to GDPR](https://community.appfarm.io/t/docs-update-guide-to-gdpr/622)
**Author:** [@Joanna](https://community.appfarm.io/u/Joanna)\ **Replies:** 3\ **Last updated:** [January 28, 2025, 1:50pm UTC](https://community.appfarm.io/t/docs-update-guide-to-gdpr/622 "2025-01-28T13:50:42Z")
By popular demand, we are pleased to share that a comprehensive guide to GDPR has been added to our documentation. We hope it becomes a useful resource in your journey towards building GDPR-compliant applications in Appf… --- ## [DoS protection in appfarm for app (not services)](https://community.appfarm.io/t/dos-protection-in-appfarm-for-app-not-services/1510)
**Author:** [@Johan18](https://community.appfarm.io/u/Johan18)\ **Replies:** 3\ **Last updated:** [November 18, 2024, 12:55pm UTC](https://community.appfarm.io/t/dos-protection-in-appfarm-for-app-not-services/1510 "2024-11-18T12:55:27Z")
Hi Is there any built in protection against DoS attack against for a public app that allows unauthenticated users to create objects? Due to a significant difference in performance I would like a few object classes to b… --- ## [Creating secrets from app](https://community.appfarm.io/t/creating-secrets-from-app/780)
**Author:** [@larshvidsten](https://community.appfarm.io/u/larshvidsten)\ **Replies:** 5\ **Last updated:** [September 30, 2024, 12:15pm UTC](https://community.appfarm.io/t/creating-secrets-from-app/780 "2024-09-30T12:15:38Z")
Hi! I have an application with several customers with their own API keys to external APIs. Is there a better way of handling these secrets than through properties on objects? I want to use appfarm secrets but then I nee… --- ## [Secret/password management](https://community.appfarm.io/t/secret-password-management/1214)
**Author:** [@SinanMaric](https://community.appfarm.io/u/SinanMaric)\ **Replies:** 1\ **Last updated:** [May 2, 2024, 12:12pm UTC](https://community.appfarm.io/t/secret-password-management/1214 "2024-05-02T12:12:50Z")
Hi, community :slight\_smile: We have several integrations, and we want the user to be able to enter the credentials once, and then it should be stored. However, we want these stored credentials to not be visible for the… --- ## [Best practice for Roles in PROD vs Test/dev](https://community.appfarm.io/t/best-practice-for-roles-in-prod-vs-test-dev/1050)
**Author:** [@Preben](https://community.appfarm.io/u/Preben)\ **Replies:** 5\ **Last updated:** [March 4, 2024, 8:26am UTC](https://community.appfarm.io/t/best-practice-for-roles-in-prod-vs-test-dev/1050 "2024-03-04T08:26:13Z")
Hi, What is the best way to ensure that the roles used in PROD is correct, but at the same time don’t give users access to Dev and Test environments? Normally we would like to test with the same roles as a user in PROD… --- ## [New and improved security checklist](https://community.appfarm.io/t/new-and-improved-security-checklist/686)
**Author:** [@Joanna](https://community.appfarm.io/u/Joanna)\ **Replies:** 0\ **Last updated:** [September 13, 2023, 9:34am UTC](https://community.appfarm.io/t/new-and-improved-security-checklist/686 "2023-09-13T09:34:28Z")
We are excited to announce that our security checklist, which is an integral part of Appfarm Create documentation, has undergone a significant overhaul to better serve our users. Our primary objective in this revamp was … --- ## [Broken access control for users](https://community.appfarm.io/t/broken-access-control-for-users/310)
**Author:** [@Erlend](https://community.appfarm.io/u/Erlend)\ **Replies:** 12\ **Last updated:** [September 7, 2023, 7:30am UTC](https://community.appfarm.io/t/broken-access-control-for-users/310 "2023-09-07T07:30:10Z")
Hello Appfarm, We have had some issues when it comes to access control. We have a profile object that maps to a users appfarm user. Within this object there are several attributes as firstname, lastname etc. We want som… --- ## [Allowing more users than max user quota in a (public) app containing sensitive information](https://community.appfarm.io/t/allowing-more-users-than-max-user-quota-in-a-public-app-containing-sensitive-information/404)
**Author:** [@Johan18](https://community.appfarm.io/u/Johan18)\ **Replies:** 1\ **Last updated:** [April 14, 2023, 6:17pm UTC](https://community.appfarm.io/t/allowing-more-users-than-max-user-quota-in-a-public-app-containing-sensitive-information/404 "2023-04-14T18:17:56Z")
We are building an app where it should be possible to let a lot of people (thousand+) in to play a game for a short amount of time. Some of the data exposed in the game is sensitive data that should only be possible to r… --- ## [2FA for the login](https://community.appfarm.io/t/2fa-for-the-login/56)
**Author:** [@SigurdEileras](https://community.appfarm.io/u/SigurdEileras)\ **Replies:** 6\ **Last updated:** [February 28, 2023, 2:12pm UTC](https://community.appfarm.io/t/2fa-for-the-login/56 "2023-02-28T14:12:05Z")
We are building a SaaS platform where some of the clients have different needs for login and security. Is it possible to enable two-factor authentication where users have to log in using a password for their Appfarm user… --- ## [How secure is a web request?](https://community.appfarm.io/t/how-secure-is-a-web-request/77)
**Author:** [@system](https://community.appfarm.io/u/system)\ **Replies:** 1\ **Last updated:** [December 14, 2022, 3:10pm UTC](https://community.appfarm.io/t/how-secure-is-a-web-request/77 "2022-12-14T15:10:56Z")
How secure is a web request? Using TLS and a bearer token does one still need to assume that the body content can be decoded?