Doesn't this show just how crappy the backend permissions must be in Facebook's code? Every new page needs to get the permissions checks exactly right, otherwise... Disaster. As an analogy, It's like the most stupidly-designed UNIX system, where each user program that opens a file runs as root and must remember to do a permissions check when opening a file, rather than centralising the permissions system in the kernel.
No-one would accept such a shoddy design in an OS, yet in today's web apps it is apparently standard practice...
No-one would accept such a shoddy design in an OS, yet in today's web apps it is apparently standard practice...