title: How do BAAS solutions both allow custom code and keep things secure?
body: <p>Baas, backend-as-a-service, solutions like <a href="http://www.parse.com" rel="nofollow">Parse.com</a> and <a href="http://www.stackmob.com" rel="nofollow">StackMob</a> allow application developers to add and use custom code to run server-side business logic. I'm interested in learning how you could add functions to the app server without disruptions to other applications and keep malicious code from accessing the system or data they shouldn't.</p>
  
  <p>I've searched for any posts or disclosures of how Parse or StackMob might have built up their architectures and have come up empty.</p>