Re: [OT] Not everything goes well in Ruby land :-)

Mike Schrag <[email protected]> Mon, 7 Jan 2008 16:52:43 -0500
Newsgroups gmane.comp.web.webobjects.general
Message-ID <[email protected]>
>  What do you think? What are the goods and the bads of exposing PKs  
> in URLs?
The only issue as far as I'm concerned is security.  I don't care if  
anyone sees PK's, but exposing access to arbitrary EO's via a URL  
means that the onus of security is much more on the developer's  
shoulders.  With normal component actions, there's at least some level  
of security built-in (that you are even able to access this action  
means that you were pre-authorized to get to it by way of some  
authentication process). Note, however, that this is really not all  
that different than security of DA's in general (or even direct access  
to any .wo that has intrinsic state).

ms