Once we have disabled a button using client-side JavaScript, our goal is to initiate an Ajax call to create a record in a database table through an On-Demand Process. However, there is a concern that users could bypass this process by making similar calls directly from the browser console. How can we prevent unauthorized record creation?
Is it typically secure to make Ajax calls using apex.server.process? And if not, what steps can be taken to enhance their security?
Your guidance on this matter would be greatly appreciated. Thank you.