3 ms·

Interesting. How does server side validation and access control work with this?

• carlsverre 3y ago
  Good questions! Validation can be handled in the reducer layer. Since the reducer logic re-runs on the server, it can do anything including reaching out to server-side resources like authorization or other dbs to ensure the client isn't doing anything fishy. It's also possible to use the full capabilities of SQLite to execute automatic in-db validation via triggers, constraints, checks, etc. Access control is more difficult. Currently SQLSync is full db sync, so a user either has read or read+write access to an entire db. Validation can stop certain users from writing to portions of the db that they don't have permissions to - but the only way to restrict reads is to split the data across multiple dbs. For some apps this is not ok - and thus I'm researching different ways to achieve partial replication.
  • fghorow 3y ago
    Please, please don't store any passwords, health, or financial information in your stack unless you solve this!!!!
  • frenchman99 3y ago
    Thanks for explaining!