Re: General Security-Question - Mailing list pgsql-general

From Doug McNaught
Subject Re: General Security-Question
Date
Msg-id m3u21dcx4r.fsf@belphigor.mcnaught.org
Whole thread Raw
In response to General Security-Question  (elwood@agouros.de (Konstantinos Agouros))
List pgsql-general
Konstantinos Agouros <elwood@agouros.de> writes:

> On Mon, Jun 18, 2001 at 05:02:45PM -0400, Doug McNaught wrote:

> > Honestly, I think the best way to do this is to create a Java class
> > (or classes) that implements all your business logic on the server
> > side, then have the applet make RMI calls into that API.  You can pass
> > the applet a random cookie when it's created, and have the applet pass
> > that back as part of the RMI call, and then check in the server logic
> > to see whether the user is trying any funny stuff (like trying to see
> > or modify someone else's data).
> >
> > Make sense?

> That way I could bind the postgres-master zu 127.0.0.1 that might
> work though.  My Problem is, that if I would use a regular
> applet/jdbc-connection the postmaster has to listen on the real
> network address and if I create normal dbaccounts, everybody could
> call psql and that is what I want to avoid. But I guess I go with
> the Static-ID-Part since it is easier to implement \:)

I'm not totally sure what you mean by the above, but good luck...  ;)

-Doug
--
The rain man gave me two cures; he said jump right in,
The first was Texas medicine--the second was just railroad gin,
And like a fool I mixed them, and it strangled up my mind,
Now people just get uglier, and I got no sense of time...          --Dylan

pgsql-general by date:

Previous
From: Konstantinos Agouros
Date:
Subject: Re: General Security-Question
Next
From: Tom Lane
Date:
Subject: Re: General Security-Question