Page 1 of 1

Database access outside of Appery

Posted: Thu Jul 03, 2014 7:00 pm
by Anton6737105

Hi,
I'd like to build an app where my mobile app will mostly display data but creation of the database records will be done outside (from the Windows PC or via an external web server).
What could you suggest me?
1) Is it better to use the Appery's DB and use existing features on the mobile?
If yes - how can I access the DB from Windows PC?
I've tried curl, it worked but I have some concerns of the secuity...
2) Use external DB (say MSSQL)?
How to access it from the Appery on the mobile device?
And again - where MSSQL user/password will be stored?

Actually it will be the only one app in the Play/Appstore but users will get different access to the database (to be more precise - several different databases) according to their rights.
That's why security is my concern.


Database access outside of Appery

Posted: Thu Jul 03, 2014 8:58 pm
by Kateryna Grynko

Hi Anton,

You can use Appery.io Database (http://devcenter.appery.io/documentat...) or any other third-party database and access it via REST services (http://devcenter.appery.io/documentat...)

It's up to you what to choose. Appery.io Database is integrated so it's a bit easier to use.


Database access outside of Appery

Posted: Fri Jul 04, 2014 3:55 pm
by Anton6737105

Katya,
I'm pretty sure that you offer a perfect service with different features. But let me explain my concern in security and correct me if my assumptions are wrong.

If I use Appery DB - how security is maintained? Is there any username/password/key which is encrypted inside the app and can't be revealed?

Could look inside the app or sniff something like
use database dbXXX; select * from tblXXX where somefield=somefilter; ?
If yes - he can easily make a request with the "where" clause and get an access to the whole database which is not appropriate for me.

Well, I understand that Appery DB does not have exactly the same syntax but I hope you understand what I mean.
I absolutely need to ensure that users have access only to their part of database, not to all data. Even logged user should have access to different parts of the db (several groups of users).


Database access outside of Appery

Posted: Fri Jul 04, 2014 4:45 pm
by Kateryna Grynko

Hi Anton,

You can pass one data and replace it with another using Appery.io proxy:
http://devcenter.appery.io/documentat...


Database access outside of Appery

Posted: Fri Jul 04, 2014 4:52 pm
by Anton6737105

Thank you very much for this point!