This was my original complaint with database triggers. It ends up breaking where your important code exists.

However we're entering an age where database + authorization may be more and more available as an all-in-one solution. More vendors are realizing that REST style services are just a facade over a database anyway - so why have an application server?