I don't get it. Just get the SQL admins to create you a read only account with access to only the necessary DB's / Tables.
Then just talk to it, there is no danger, as you can't write, no security as you can't access stuff you were not supposed to. PS: Who said you can't pass paramaters to a view. select * from viewName where recordId = 4 recordId = 4 is a parameter passed to the view, is it not? Regards Dale Fraser -----Original Message----- From: [email protected] [mailto:[EMAIL PROTECTED] On Behalf Of grant Sent: Thursday, 6 July 2006 15:23 PM To: [email protected] Subject: [cfaussie] ot: db architecture question hi all we've got a propriety system here that backends onto sql server. the system maintains all time entries and billing information for the firm - and in the firms view, this information is sacred and has about a million levels of security. I've been charged with making a web-visible reporting tool using the information in this system. we are not allowed to connect directly from CF to the sql database - there has to be a layer of abstraction between the web-visible server and the internal database. we've already done a version one, where we ran a seperate sql-server with linked views to the production sql-server. this has had many pitfalls, the main one being that you can't pass in parameters to a view - or link stored procs. basically we've had to make seperate views for each of the parameters that we wish to pass in (usually it's clientid, of which we only have about five at the moment) but it's a managability nightmare. so here's my question: how can i access the production db, either from the cf server or a separate db server, while still maintaining an abstracted level of security (and be able to pass in parameters)? There are about 3million records we're sifting through, so it's not practical to bring it into cf memory and filter from there. any ideas, for you advanced db guys? thanks grant --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "cfaussie" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cfaussie -~----------~----~----~----~------~----~------~--~---
