General Security-Question
От | elwood@agouros.de (Konstantinos Agouros) |
---|---|
Тема | General Security-Question |
Дата | |
Msg-id | elwood.992895619@news.agouros.de обсуждение исходный текст |
Ответы |
Re: General Security-Question
Re: General Security-Question |
Список | pgsql-general |
Hi, I am currently developing a software that should replace our hated excel-time- sheets. My problem is the following: I have an javaapplet for dataentry that connects to the database via jdbc. There is a table that holds the data (who worked what when). So far so good, but: Since I must grant update/insert/delete access to this table to everybody that can use this application, how can I stop people from updating the data of the others. The one thing that came to my mind was not creating database- users but instead use a static user, and let the application handle the logic who can access which lines in the database (its also a matter of dataprivacy, one should be allowed to watch one's own data but not of the others, the team- manager should see the data of the team etc). The read-access can be implemen- ted using views but I don't see much other way for data-entry. Somebody has an idea? Konstantin -- Dipl-Inf. Konstantin Agouros aka Elwood Blues. Internet: elwood@agouros.de Otkerstr. 28, 81547 Muenchen, Germany. Tel +49 89 69370185 ---------------------------------------------------------------------------- "Captain, this ship will not sustain the forming of the cosmos." B'Elana Torres
В списке pgsql-general по дате отправления: