ACR Rules

  1. Home
  2. Docs
  3. ACR Rules
  4. Performance (29)
  5. Microflow should not apply entity access

Microflow should not apply entity access

This rule checks that a microflow does not apply entity access. Overzealosly applying entity access can have a big impact on performance.

This rule is in contradiction to Microflow called from the client should apply entity access rules. When developing multi-tenant apps, our advice is to apply entity access. The performance hit is preferred to potential data breaches. In such cases, it is possible to ignore microflows called from pages/navigation.

Noncompliant example:

Compliant example: