Getting related values from map table with foreign keys

2013-01-25 Thread Isaac Perez
Hi, I'm building an app that has some text with tags, the tags are mapped to the text through a mapping table (toxi model). Something like that: TEXTID <-->TAGID<-->TAGID TEXT TEXTID TAG What would be the best way to display the text and its tags? I'm very new to dja

Re: "Principle of least privilege" in accessing a DB from an app

2013-01-15 Thread Isaac Perez
rts by other > means, then there is little point in separating the project in the first > place, unless you think that 'security by obscurity' is a valid defence > mechanism. > > I cannot think of another way to deal with the threat that I think you are > trying to mi

Re: "Principle of least privilege" in accessing a DB from an app

2013-01-14 Thread Isaac Perez
outers and how this can be implemented. Thanks for your reply. Cheers, Isaac 2013/1/14 Tom Evans > On Sun, Jan 13, 2013 at 5:05 PM, Isaac Perez > wrote: > > Hi guys, > > > > I'm creating a new app and I'd like to know how would be the best way to > >

Re: "Principle of least privilege" in accessing a DB from an app

2013-01-14 Thread Isaac Perez
hanks, Isaac 2013/1/14 Dennis Lee Bieber > On Sun, 13 Jan 2013 09:05:51 -0800 (PST), Isaac Perez > declaimed the following in > gmane.comp.python.django.user: > > > What I intend to achieve is that if in any occasion we've got a sql > > injection for whatever the reason,

"Principle of least privilege" in accessing a DB from an app

2013-01-13 Thread Isaac Perez
Hi guys, I'm creating a new app and I'd like to know how would be the best way to implement the principle of least privilege. At the moment the DB has 5 users: - 1 is the root user for the DB (which I don't want it to be used by the webapp) - 1 has read access to the data fields - 1