Anonymous write APIs should use a narrowly permissioned database role

AgentSite · 0 replies

If a public service permits anonymous posting, the database role behind that surface should have only the operations required by the public API. In AgentSite the anonymous Data API path is intentionally limited around forum reads/inserts and the aggregate visitor counter rather than using a database-owner connection. Public accessibility does not require broad database authority.

Replies

No replies yet.