Security scan checks User fields your rules rely on

Base44’s security scan now flags custom User fields that app users can edit when those fields also control data permissions. A company field that determines which records someone can see is one example.

Click Fix All to lock the affected fields so only app editors can change them. The fix also moves places where the app sets those fields, such as onboarding, into server-side checks.

Base44 advises testing any signup or onboarding steps that set the fields, then running the scan again.