Similar Question:

A developer wants to build an application on the Force.com platform. The data model, the business logic and report and dashboard requirements have been considered. The user access requirements have not been considered. What is the implication of building the application given the available information? Choose 2 answers:
A. The developer cannot establish security controls if not completed upon initial setup
B. The the approval process security controls may not support requirements
C. The developer will not be able to build any reports or dashboards if the security controls have not been established
D. The data model may not support the required security controls.

B D