Comments on: Flex on Rails not a dream any more!!!

By: Ø§Ù†Ù…ÙŠ

Ø§Ù†Ù…ÙŠ — Tue, 14 Aug 2007 18:46:57 +0000

tanks

By: Alex MacCaw

Alex MacCaw — Sun, 04 Mar 2007 17:11:36 +0000

Does the WebORB security mechanism limit what methods are called on the model? For example, my current setup uses REST. If users make a call to /folders they get a response containing all the folders they own. Now, with the weborb setup, wouldn’t it be possible to do ‘Folder.find(:all)’ from flex and get all the folders! Surely there are massive security implications unless you can limit what methods are called on the server side (like weborb does currently)?

By: Mark Piller

Mark Piller — Fri, 02 Mar 2007 12:20:41 +0000

Alex, the server side endpoints supporting the framework can be secured using WebORB security mechanism, which is very strong. Even if someone hacks together a Flex application, you still need to authenticate yourself to break-in.

By: Alex MacCaw

Alex MacCaw — Fri, 02 Mar 2007 12:07:04 +0000

Has anyone thought of the security implications involved? Even if you authenticate users, someone could just make a flex application that accesses server side data that it shouldn’t…
Active Resource for flex (REST) is an alternative , for example:
var delegate:Post = new Post( this );
var o:Object = new Object()
o.name = â€œfooâ€
delegate.save(o)