I have a query related to this old thread. When a user connects to OrientDB, it is able to query any cluster and get all records of that cluster, same for oRole and oUser. For security reasons, I do not to expose my oUser and oRole clusters over REST, how can I do that ? OR if possible, how can a user just see their records (NOT ALL RECORDS) in oUser and oRole clusters on REST call ?
Regards, Gaurav On Tuesday, February 12, 2013 7:59:53 PM UTC+5:30, JUNNEL GALLEMASO wrote: > > Hello Lvc@, > > > Can you give me a format of what you called embeddedmap? because we can't > see the values when we try to query or edit with it. > > And also, for example...we are going to register to a registration page, > the data will be saved to the oUser..then when are going to save the > password of it, it is in sha-256 right? so we will encode the password to > sha-256 right? or the orientdb will just encode it for us? > > thanks! :) > > regards, > Junnel > > On Tuesday, February 12, 2013 10:22:35 PM UTC+8, Lvc@ wrote: >> >> Hi Junnel, >> OrientDB is schema-less, so add the properties you need or link to >> another class if you want to keep things separated. >> >> About properties you can add what you want: it's only a map of >> string,string. >> >> Lvc@ >> >> >> On 12 February 2013 15:19, JUNNEL GALLEMASO <[email protected]> wrote: >> >>> Hello lvc@, >>> >>> thanks for the response, just a follow-up question >>> >>> hmmm....but we are going to add another properties to the OUser class?? >>> and also oUser class uses oRoles right for the permission? there is a >>> property in oRules which is rule where the type is embbededmap? how are we >>> going to add data on that type? >>> >>> Regards, >>> Junnel >>> >>> >>> On Tuesday, February 12, 2013 10:06:28 PM UTC+8, Lvc@ wrote: >>> >>>> Hi Junnel, >>>> if you use the OUser class you can benefit of OrientDB security ;-) >>>> >>>> >>>> Lvc@ >>>> >>>> >>>> On 12 February 2013 14:38, JUNNEL GALLEMASO <[email protected]> wrote: >>>> >>>>> Lvc@ >>>>> >>>>> hmmm....you mean that every user we created will be inserted to what >>>>> table actually?? to the oUser?? because we have created our own table for >>>>> users. Sorry for my rudeness because i am novice in Orientdb....can you >>>>> guide me with this one? >>>>> >>>>> Regards, >>>>> Junnel >>>>> >>>>> On Tuesday, February 12, 2013 5:48:25 PM UTC+8, Lvc@ wrote: >>>>> >>>>>> Hi, >>>>>> as for any Web Application the user needs to login, right? It's the >>>>>> same: let the user to insert user+password and authenticate it against >>>>>> OrientDB server ;-) >>>>>> >>>>>> Lvc@ >>>>>> >>>>>> >>>>>> On 12 February 2013 02:20, JUNNEL GALLEMASO <[email protected]>wrote: >>>>>> >>>>>>> But if it is going to CREATE, DELETE, UPDATE his own record? the >>>>>>> oUser that needs to be created would have this functionalities, so it >>>>>>> still >>>>>>> not secure if i will be going to view source since we are not using >>>>>>> languages other than javascript for having a RESTful API. >>>>>>> >>>>>>> >>>>>>> On Monday, February 11, 2013 11:29:02 PM UTC+8, Jason Bowman wrote: >>>>>>>> >>>>>>>> Can you create an 'anonymous' user with an obvious password and >>>>>>>> highly restrict the account? Make sure it can't write any data, can >>>>>>>> only >>>>>>>> query things you want anyone to see, etc. >>>>>>>> -JB >>>>>>>> >>>>>>>> -- >>>>>>> >>>>>>> --- >>>>>>> You received this message because you are subscribed to the Google >>>>>>> Groups "OrientDB" group. >>>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>>> send an email to [email protected]. >>>>>>> >>>>>>> For more options, visit https://groups.google.com/groups/opt_out. >>>>>>> >>>>>>> >>>>>>> >>>>>> >>>>>> -- >>>>> >>>>> --- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "OrientDB" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>> an email to [email protected]. >>>>> For more options, visit https://groups.google.com/groups/opt_out. >>>>> >>>>> >>>>> >>>> >>>> -- >>> >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "OrientDB" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> For more options, visit https://groups.google.com/groups/opt_out. >>> >>> >>> >> >> -- --- You received this message because you are subscribed to the Google Groups "OrientDB" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
