Re: Connecting remotely - multi tier

From: Bob Kline <bkline(at)rksystems(dot)com>
To: Cedar Cox <cedarc(at)visionforisrael(dot)com>
Cc: "Sergio A(dot) Kessler" <sak(at)tribctas(dot)gba(dot)gov(dot)ar>, pgsql-interfaces(at)postgresql(dot)org
Subject: Re: Connecting remotely - multi tier
Date: 2000-11-02 15:43:52
Message-ID: Pine.LNX.4.10.10011021042000.24992-100000@rksystems.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-interfaces

On Thu, 2 Nov 2000, Cedar Cox wrote:

>
> You seem to have given this a lot of thought so let me ask a
> question. How do I implement a user login system? If the user
> knows their password (and don't they always?..), what's to stop them
> from finding and contacting the database directly, bypassing the
> middle tier? I haven't been able to find a solution to this
> problem. Every time I try to think about it by brain goes into a
> recursive loop! :o
>
> Ideas?

The solution is decoupling your application's security from that imposed
by the DBMS.

--
Bob Kline
mailto:bkline(at)rksystems(dot)com
http://www.rksystems.com

In response to

Browse pgsql-interfaces by date

  From Date Subject
Next Message Adam Lang 2000-11-02 16:17:55 Re: Connecting remotely - multi tier
Previous Message Cedar Cox 2000-11-02 15:18:48 Re: Connecting remotely - multi tier