Re: [OT] Not everything goes well in Ruby land :-)
Mike Schrag <[email protected]> Mon, 7 Jan 2008 16:52:43 -0500
| Newsgroups | gmane.comp.web.webobjects.general |
|---|---|
| Message-ID | <[email protected]> |
> What do you think? What are the goods and the bads of exposing PKs > in URLs? The only issue as far as I'm concerned is security. I don't care if anyone sees PK's, but exposing access to arbitrary EO's via a URL means that the onus of security is much more on the developer's shoulders. With normal component actions, there's at least some level of security built-in (that you are even able to access this action means that you were pre-authorized to get to it by way of some authentication process). Note, however, that this is really not all that different than security of DA's in general (or even direct access to any .wo that has intrinsic state). ms