Re: [Gnumed-devel] multitaskhttpd experiment

[Sebastian Hilbert]

Am Mittwoch 14 Juli 2010, 17:39:55 schrieb Karsten Hilbert:
> On Wed, Jul 14, 2010 at 08:31:52AM -0700, lkcl wrote:
> >  whilst i realise it would be a lot of work, you really should give
> >  serious
> > 
> > consideration to not using postgresql roles, and doing the RBAC
> > "manually",
> 
> No.
> 
> >  but... hmmm.... that would mean that you could not guarantee data
> >  security,
> > 
> > wouldn't it?  because it would be the app performing the security, with
> > total open-access to the database, wouldn't it?
> 
> Exactly.
> 
> (Except it seems there's a number of web EMRs that seem fine
> with that sort of thing.)

Yeah. Noone cares about security. Rectent data suggests that user never change 
their passwords in their entire life and they use their cat's name anyway :-)

Sebastian