security

You are reading this on NimbusCMS. The post is not special, it is a row in a content collection, and almost everything that makes it feel like a blog lives in one small plugin on purpose.

The first thing I refused to give a NimbusCMS plugin was the one thing you would expect a CMS plugin to have: the ability to read your content. Here is why, and the narrow door I opened when my own app needed it.

Most permission bugs are not exotic. They are a wildcard grant that reached one step further than anyone meant it to. Building a CRM full of personal data, that was the failure I wanted to make impossible.