On 06/07/2006, at 4:56 AM, [EMAIL PROTECTED] wrote:

>
> So does your database only have one user created and you specify  
> that in
> the settings file or whenever you want to inspect the database by  
> hand?
>
> I'm under the impression that having a separate database user for the
> web server and the developer is the Right Thing To Do(tm).
> Unfortunately I don't find anything in the documentation, wiki, or
> archives to support that idea.

that's probably because it is outside of the scope of django itself ;-)
what I usually do is create the schema via a SQL file with a 'admin'  
user, and then grant a restrictive access
to the user I let django connect with.
basically this protects me from 'DML' errors (ie dropping a table or  
an index)
but not from deleting rows.

If I were to be really 'anal' I would set up 2 separate settings  
files and make the updates go to a separate host with more access  
controls on it.
but for the apps I'm writing now that isn't applicable.

regards
Ian
>
> Nate
>
> >


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users
-~----------~----~----~----~------~----~------~--~---

Reply via email to