8. Security

@todo

User roles & Permissions

Cross-origin resource sharing (CORS)

"CORS is a mechanism that allows a web page to make XMLHttpRequests to another domain. Such "cross-domain" requests would otherwise be forbidden by web browsers, per the same origin security policy." (from the Drupal CORS module).