Cannot generate accesskey

[Peter De Keer]

I would want to play with it, but I cannot create an accesskey.

Second question:
How can I prevent people from hacking into the database? All keys are
publicly 'seen'. I have to use the http api for instance, but
everybody using my application can see the requests I'm sending...

Thanks!

Peter

[psch...@gmail.com]

Peter; thanks for taking a look!

> I would want to play with it, but I cannot create an accesskey.

Sorry -- you should be able to generate an accesskey again on the main
page now; apparently my ISP decided to randomly reboot my host.

> Second question:
> How can I prevent people from hacking into the database? All keys are
> publicly 'seen'. I have to use the http api for instance, but
> everybody using my application can see the requests I'm sending...

So the trick here is to use the management interface to create a
different accesskey that will be publicly available and keep your
personal accesskey private. You can also use the management interface
to limit what actions the public accesskey can perform. In a typical
use case, you might allow the public accesskey to query from a
specific list of bags and allow it to call certain stored procedures
to perform modifications. You could also grant insert/update/remove
directly on bags, but this approach obviously gives you less control.

It's also fairly likely that you'll want to implement your own level
of access control underneath what's provided; for instance, if your
application has multiple users and you need to be able to isolate them
in some fashion. You can implement this kind of finer-grained access
control by calling stored procedures and/or by implementing javascript
hooks; see http://www.millstonecw.com/dovetaildb/stored_procedures.html

Cheers,
Phil

[Peter De Keer]

Thanks for your quick and clear reply!

I'm going to be honest with you :-) (I've always been so, so far)
I'm coming from appjet.com witch is having performance issues.

I have a very lightweight application, but should work fast for the
people using the application to be happy (me for instance ;-)

I'm looking into your serverside javascript, it can return neat
things, but it stays JSON all the time right?
In order to make a real application, the only thing I would need is
some HTML and Javascript (JQuery).

One 'problem' I just encountered is that my updated function doesn't
work.
I tried to change the function name ... no result:
http://dovetaildb.millstonecw.com/call?db=BoomTown&accesskey=F9CRuyB43ewn4tRijvb5wQ0FA79DIw46&function=lloWorld&arguments=[0,1]
The error is:
Function \"lloWorld\" is not defined
But it really is defined...

Could you please help me out?



Peter

[psch...@gmail.com]

> I'm coming from appjet.com witch is having performance issues.
> I have a very lightweight application, but should work fast for the
> people using the application to be happy (me for instance ;-)

Neat. As you have noticed, there's not much in the way of uptime or
performance assurances with the public server, but feel free to try it
out and see if it does better than appjet (I was not previously aware
of it). If dovetaildb has a strength over appjet, it's likely in the
transparent indexing strategy.

> I'm looking into your serverside javascript, it can return neat
> things, but it stays JSON all the time right?

Yup. Only vanilla JSON can be stored or returned from server-side
javascript functions.

> One 'problem' I just encountered is that my updated function doesn't
> work.

> I tried to change the function name ... no result:http://dovetaildb.millstonecw.com/call?db=BoomTown&accesskey=F9CRuyB4...[0,1]

> The error is:
> Function \"lloWorld\" is not defined
> But it really is defined...

When I click on the URL it looks like it's working; did you do
something to fix it? (or did it fix itself?) Is it possible that you
previously had a syntax error? If not, are there steps I could take
to replicate the issue you were seeing previously so that I can
investigate?

Good luck with your app! Keep us up-to-date on how it goes.
Phil

On May 27, 4:23 am, Peter De Keer <peter.de.k...@gmail.com> wrote:
> Thanks for your quick and clear reply!
>
> I'm going to be honest with you :-) (I've always been so, so far)
> I'm coming from appjet.com witch is having performance issues.
>
> I have a very lightweight application, but should work fast for the
> people using the application to be happy (me for instance ;-)
>
> I'm looking into your serverside javascript, it can return neat
> things, but it stays JSON all the time right?
> In order to make a real application, the only thing I would need is
> some HTML and Javascript (JQuery).
>
> One 'problem' I just encountered is that my updated function doesn't
> work.

> I tried to change the function name ... no result:http://dovetaildb.millstonecw.com/call?db=BoomTown&accesskey=F9CRuyB4...[0,1]

[Peter De Keer]

Ok, I have the same situation currently:

This 'call' generates an error:
http://dovetaildb.millstonecw.com/call?db=BoomTown&accesskey=F9CRuyB43ewn4tRijvb5wQ0FA79DIw46&function=helloworld&arguments=[0,1]

But, I have a funtion defined:

function helloworld() {
return "Gmail World ";
}

Peter