Timeline for Tables vs. Booleans: Which of the two are more secure for setting admin roles in an app? [closed]
Current License: CC BY-SA 3.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 23, 2017 at 12:40 | history | edited | CommunityBot |
replaced http://stackoverflow.com/ with https://stackoverflow.com/
|
|
| Dec 28, 2015 at 22:59 | history | closed |
Scant Roger Ixrec user53019 user22815 user40980 |
Needs details or clarity | |
| Dec 19, 2015 at 10:49 | comment | added | Sjoerd Job Postmus | Just one thing to keep in mind: depending on your application and security model: there might be multiple roles, and even a case where there isn't a "role/user with all permissions". | |
| Dec 19, 2015 at 7:30 | answer | added | kiwiron | timeline score: 0 | |
| Dec 19, 2015 at 1:36 | comment | added | Ixrec | That SO answer seems completely baseless to me. Why would a string in the Roles table be any more secure than a boolean in the User table? They're both just values in a database. Unless your database supports different permissioning schemes for each table or something. | |
| Dec 19, 2015 at 1:13 | history | edited | Carl Edwards | CC BY-SA 3.0 |
added 11 characters in body
|
| Dec 19, 2015 at 1:11 | review | Close votes | |||
| Dec 28, 2015 at 22:59 | |||||
| Dec 19, 2015 at 1:05 | comment | added | Carl Edwards | @lxrec - Updated answer with additional information. | |
| Dec 19, 2015 at 1:04 | history | edited | Carl Edwards | CC BY-SA 3.0 |
added 618 characters in body
|
| Dec 19, 2015 at 0:29 | answer | added | Lightness Races in Orbit | timeline score: 2 | |
| Dec 19, 2015 at 0:13 | comment | added | Ixrec | I'm not sure why the structure of the data would have any effect on security. It's not like we're talking about different encryption schemes, or the rules governing who has access to what data. Is it possible you've left out some details we need to fully understand the problem? | |
| Dec 18, 2015 at 23:56 | history | asked | Carl Edwards | CC BY-SA 3.0 |