We have several ideas and approaches which required us to use OQL. One of the more relevant ones is a runtime configurable dashboard for reports. We also have a multi tenant setup which requires us to strictly separate data.
It would be nice if you could toggle and option to enforce entity access in OQL in order to be able to guarantee the data separation defined in the entity access XPath constraints.
I’m sure any more sophisticated, dynamic application will have to make use of OQL retrieves at some point. Providing this as a platform feature will definetly improve the security and the overall possibilities.
What do you think?