I haven’t done any thorough testing, but is there an EE safeguard which prevents someone from editing an EE entry via SAEF and changing the entry_id? My fear is that I allow a user group to edit certain entries and someone becomes malicious and changes an entry_id which overrides another entry. Does the XID play a role in verifying that the entry submitted is the same one which has been requested to edit? I’m sure it’s not a huge threat as most people don’t care or are aware that certain tools can allow you to display and edit hidden field values.