Database access outside of Appery

Thu Jul 03, 2014 7:00 pm

Hi,
I'd like to build an app where my mobile app will mostly display data but creation of the database records will be done outside (from the Windows PC or via an external web server).
What could you suggest me?
1) Is it better to use the Appery's DB and use existing features on the mobile?
If yes - how can I access the DB from Windows PC?
I've tried curl, it worked but I have some concerns of the secuity...
2) Use external DB (say MSSQL)?
How to access it from the Appery on the mobile device?
And again - where MSSQL user/password will be stored?

Actually it will be the only one app in the Play/Appstore but users will get different access to the database (to be more precise - several different databases) according to their rights.
That's why security is my concern.

Thu Jul 03, 2014 8:58 pm

Hi Anton,

You can use Appery.io Database (http://devcenter.appery.io/documentat...) or any other third-party database and access it via REST services (http://devcenter.appery.io/documentat...)

It's up to you what to choose. Appery.io Database is integrated so it's a bit easier to use.

Fri Jul 04, 2014 3:55 pm

Katya,
I'm pretty sure that you offer a perfect service with different features. But let me explain my concern in security and correct me if my assumptions are wrong.

If I use Appery DB - how security is maintained? Is there any username/password/key which is encrypted inside the app and can't be revealed?

Could look inside the app or sniff something like
use database dbXXX; select * from tblXXX where somefield=somefilter; ?
If yes - he can easily make a request with the "where" clause and get an access to the whole database which is not appropriate for me.

Well, I understand that Appery DB does not have exactly the same syntax but I hope you understand what I mean.
I absolutely need to ensure that users have access only to their part of database, not to all data. Even logged user should have access to different parts of the db (several groups of users).

Fri Jul 04, 2014 4:45 pm

Hi Anton,

You can pass one data and replace it with another using Appery.io proxy:
http://devcenter.appery.io/documentat...

Fri Jul 04, 2014 4:52 pm

Thank you very much for this point!