Comments on: default-deny in webapps? http://www.complich8.net/archives/198 complacence is the enemy Wed, 18 Feb 2009 02:57:02 +0000 hourly 1 http://wordpress.org/?v=3.0.1 By: Josh http://www.complich8.net/archives/198/comment-page-1#comment-323 Josh Mon, 06 Mar 2006 00:05:01 +0000 http://www.complich8.net/archives/198#comment-323 The app we use at work that runs from a DB only has select access, directly. If it wants to run an update, it has to use a stored procedure. The SP will then have tons of checks to make sure that the app isn't trying to do something stupid. There's also a SP for inserting and deleting. Nothing in the app has drop / table mod privs, or even close. It's kind of a bitch to maintain, in that we have a hundred+ tables, so any insert/update on any of them has to have an SP, and any time we modify a column or something, the SPs have to be updated to match. However, it's also very safe. It's impossible to use the app to mess up the database. Even if I go screw with the database myself outside of the app, I don't have access to drop / create / modify tables. It seems a bit cumbersome to ask your DBA for something as simple as changing the length on a column, but our DBs sure won't be breaking anytime soon. The app we use at work that runs from a DB only has select access, directly. If it wants to run an update, it has to use a stored procedure. The SP will then have tons of checks to make sure that the app isn’t trying to do something stupid. There’s also a SP for inserting and deleting. Nothing in the app has drop / table mod privs, or even close.

It’s kind of a bitch to maintain, in that we have a hundred+ tables, so any insert/update on any of them has to have an SP, and any time we modify a column or something, the SPs have to be updated to match. However, it’s also very safe. It’s impossible to use the app to mess up the database.

Even if I go screw with the database myself outside of the app, I don’t have access to drop / create / modify tables. It seems a bit cumbersome to ask your DBA for something as simple as changing the length on a column, but our DBs sure won’t be breaking anytime soon.

]]>