On Wed, 14 May 2014, Rob Dickerson wrote:
> I hear what you're saying. Here's why I don't quite agree.
>
> There are lots of maintenance considerations that go along with exposing
> data in a public way, including making sure the data is exposed reliably
> and securely. Even though there's no "code" to maintain, the availability
> and security of an open database connection can be affected by seemingly
> orthogonal changes to network configurations or database / ODBC
> configurations. It would be awful to realize that some innocuous looking
> config change made last month had inadvertently opened the ODBC connection
> to the entire database up to the general public! Because it exposes data in
> a much more controlled and limited way, a carefully considered service API
> is actually much easier to properly maintain than an open database
> connection.
>
That is a minor point, .. but there are a lot of opposite arguments:
1) Database security is a totally separate matter, that's why logins are
used [for the app].
2) Data is already exposed on the network for multiple users and
applications, adding a tablet app fits directly into that structure.
3) The management app will also use the same ODBC connection, so it has to
be open anyway.
4) Having to install a driver on a server adds a level of complexity that
requires separate maintenance; the fact that it appears that the iPad app
WOULD required install of a commercial dirver, ODBCRouter, is bad enough,
,.. having to maintain code is another level of complexity that should be
avoided.
Remember, this is an *internal* app, only used inside the corporate WiFi
enviornment. For a company that can't maintain a HotSync app, we need to
REALLY stay simple!
TTFR!
Lee