is possible to translate a statement that would normally retrieve a database record like patient rsid 1933437 into a url where the genome id is associated with the patient object in the local database and the path is constructed automatically by the object rest mapping layer the request may also be coupled with an authentication mechanism that allows the code making the request to be identified and audited come from a trusted source that does not need to be authenticated during the transactions have been analyzed for undesired behavior do not require proof of integrity for access to the sensitive data are executed in a trusted environment that can ensure that the sensitive information being retrieved by the modules cannot be compromised by other components can pass intermediate products between one another safely in cases where one or more of these conditions do not hold some protection may be afforded by applying the sandboxing technique described above at the individual module level approaches for implementing this type of module level sandboxing include sandboxed modules may be invoked by controller code directly if desired the modules themselves can use the object rest mapping as described above with the adapter being injected as a dependency into the virtualization container this approach may work well in cases where there are not many dependencies on other model objects or where the necessary parameters can be passed to the sandboxed modules as parameters by adding a level of indirection rather than mapping instance variables and method accesses to rest calls that return those items an object mapping can convert those requests into.