2 ms·
> I say “toy” because that’s obviously incredibly insecure. I trust postgres row-level access control a lot more than a php script with dbowner access to the d
by e12e 9y ago
> I say “toy” because that’s obviously incredibly insecure.
I trust postgres row-level access control a lot more than a php script with dbowner access to the db - so I think this depends a lot on which db, and what "direct access" means...
- chatmasta 9y agoTrue. This was a college project years ago but recently I’ve been thinking about revisiting it. With properly provisioned DB users, ACLs, and stored procedures, it could actually end up being more secure than it would be with an intermediary application server.