> each user has their own table in the > db for transactions, and they can do whatever they want to their own > data. i wouldn't want them to be able to touch anyone else's tables, > but it seems like django has a permissions system to restrict that.
ha, reading lists on mobile ... I didn't even see that you said that each user has their own table (still hard to see exactly how this is efficient/possible/done though). I think it's still a bad idea. Don't let untrusted users log into the admin is a general rule that I've seen tossed around. -- You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-us...@googlegroups.com. To unsubscribe from this group, send email to django-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/django-users?hl=en.
