> Maybe instead of going through that tough way of reinventing the wheel they should just connect to that dbs directly ;) There are already a few solutions tha

> Maybe instead of going through that tough way of reinventing the wheel they should just connect to that dbs directly ;) There are already a few solutions that do this. It's not unsafe as long as you're using a DBMS with row-level security (like Postgres) and you have a reasonable query timeout (probably < 1s) to prevent DoS attacks.