This whitepaper discusses security and performance issues of ACL's and Query Business Rules. It also discusses CSM data implementation out of the box. It suggests things to keep in mind if customer customizes out of the box schema.