Re: [GENERAL] Automating access grants

2007-03-15 Thread Douglas McNaught
I would still recommend making it available as a web service rather than giving direct access; besides the security/load issues, it lets you change the representation of the data without necessarily affecting customers (of course, you can do this also at the DB level with views). The web service i

Re: [GENERAL] Automating access grants

2007-03-15 Thread Kynn Jones
I realize that direct access gives an outside user the opportunity to overload the server. In fact, I am far less worried about malicious DOS-type attacks than I am about plain old incompetence, such as having a buggy script hammer our server with an infinite loop. BTW, is there a way to configu

Re: [GENERAL] Automating access grants

2007-03-15 Thread Stephen Frost
* Kynn Jones ([EMAIL PROTECTED]) wrote: > On 3/15/07, Stephen Frost <[EMAIL PROTECTED]> wrote: > >* Kynn Jones ([EMAIL PROTECTED]) wrote: > > >One big question I have is, is this completely read-only? > > Sorry, I should have made this clear: the access we had in mind is > strictly read-only, and

Re: [GENERAL] Automating access grants

2007-03-15 Thread David Fetter
On Thu, Mar 15, 2007 at 07:38:25AM -0400, Douglas McNaught wrote: > "Kynn Jones" <[EMAIL PROTECTED]> writes: > > > We have an in-house Postgres database that we would like to make > > publicly accessible via a password-less login (user: anonymous). > > (We already have a web front-end for this dat

Re: [GENERAL] Automating access grants

2007-03-15 Thread Kynn Jones
On 3/15/07, Stephen Frost <[EMAIL PROTECTED]> wrote: * Kynn Jones ([EMAIL PROTECTED]) wrote: One big question I have is, is this completely read-only? Sorry, I should have made this clear: the access we had in mind is strictly read-only, and only a subset of the tables at that. kj

Re: [GENERAL] Automating access grants

2007-03-15 Thread Stephen Frost
* Kynn Jones ([EMAIL PROTECTED]) wrote: > Now, supposing we have a fresh batch of host registration requests > that have passed all the filters we may impose on them (i.e. they have > been "approved" somehow). How best to automate the process of > granting access to these host? I suppose that the

Re: [GENERAL] Automating access grants

2007-03-15 Thread Douglas McNaught
"Kynn Jones" <[EMAIL PROTECTED]> writes: > We have an in-house Postgres database that we would like to make > publicly accessible via a password-less login (user: anonymous). (We > already have a web front-end for this database, but we have had a lot > of requests to allow programmatic access in