3 ms·
Very interesting model. The big question I have (and can't seem to figure it out reading the docs) is how security is handled. (That's been the huge issue with
by bprater 18y ago
Very interesting model. The big question I have (and can't seem to figure it out reading the docs) is how security is handled. (That's been the huge issue with JS talking to a DB.)
From the security FAQs: "It is the responsibility of the application to create secure queries and to perform appropriate security testing."
Ack! What the heck is a secure query?!
- flashgordon 18y agodoes that mean queries related to authentication and authorization or ensuring valid queries?
- nextdb 18y agoTake a look at this section of the manual. This explains how we encrypt a data structure encoding change permissions with data that leaves the database: http://www.nextdb.net/devguide/index.html#Up http://www.nextdb.net/devguide/index.html#Up At a thirty-thousand foot level, we explain the "round trip security model" here: http://docs.google.com/Presentation?id=df7mdmdw_11c5rmfbg9 http://docs.google.com/Presentation?id=df7mdmdw_11c5rmfbg9