Re: [GENERAL] Semi-customized queries? Subset of SQL? Accessing the parser? Injection?

2008-11-07 Thread Michelle Konzack
Am 2008-11-04 11:12:05, schrieb Webb Sprague: > > If they're that smart, they're smart enough to deal with SQL, and > > likely to be frustrated by a like-sql-but-not command language or > > a GUI query designer. > > > > Instead, create a user that only has enough access to read data (and > > maybe

Re: [GENERAL] Semi-customized queries? Subset of SQL? Accessing the parser? Injection?

2008-11-04 Thread Scott Marlowe
On Tue, Nov 4, 2008 at 12:46 PM, Webb Sprague <[EMAIL PROTECTED]> wrote: >> Or do it with simple combo boxes if you >> want to limit the users to crippled queries.) > > I want to limit my users to *half* crippled queries -- arbitrary > column lists, where clauses, group by lists, and sort by lists.

Re: [GENERAL] Semi-customized queries? Subset of SQL? Accessing the parser? Injection?

2008-11-04 Thread Steve Atkins
On Nov 4, 2008, at 11:46 AM, Webb Sprague wrote: Or do it with simple combo boxes if you want to limit the users to crippled queries.) I want to limit my users to *half* crippled queries -- arbitrary column lists, where clauses, group by lists, and sort by lists. I want to make sure that the

Re: [GENERAL] Semi-customized queries? Subset of SQL? Accessing the parser? Injection?

2008-11-04 Thread Webb Sprague
> Or do it with simple combo boxes if you > want to limit the users to crippled queries.) I want to limit my users to *half* crippled queries -- arbitrary column lists, where clauses, group by lists, and sort by lists. I want to make sure that they aren't doing any data modifications nested insid

Re: [GENERAL] Semi-customized queries? Subset of SQL? Accessing the parser? Injection?

2008-11-04 Thread Steve Atkins
On Nov 4, 2008, at 11:12 AM, Webb Sprague wrote: If they're that smart, they're smart enough to deal with SQL, and likely to be frustrated by a like-sql-but-not command language or a GUI query designer. Instead, create a user that only has enough access to read data (and maybe create temporary

Re: [GENERAL] Semi-customized queries? Subset of SQL? Accessing the parser? Injection?

2008-11-04 Thread Sam Mason
On Tue, Nov 04, 2008 at 11:12:05AM -0800, Webb Sprague wrote: > > If they're that smart, they're smart enough to deal with SQL, and > > likely to be frustrated by a like-sql-but-not command language or > > a GUI query designer. > > > > Instead, create a user that only has enough access to read data

Re: [GENERAL] Semi-customized queries? Subset of SQL? Accessing the parser? Injection?

2008-11-04 Thread David Wilson
On Tue, Nov 4, 2008 at 2:12 PM, Webb Sprague <[EMAIL PROTECTED]> wrote: > Can't do that. (Or I wouldn't have asked the question.) Need a WWW > interface, period. A WWW interface doesn't preclude the suggestion of simply relying on permissions to maintain safety and providing what amounts to a q

Re: [GENERAL] Semi-customized queries? Subset of SQL? Accessing the parser? Injection?

2008-11-04 Thread Webb Sprague
> If they're that smart, they're smart enough to deal with SQL, and > likely to be frustrated by a like-sql-but-not command language or > a GUI query designer. > > Instead, create a user that only has enough access to read data (and > maybe create temporary tables) and use that user to give them >

Re: [GENERAL] Semi-customized queries? Subset of SQL? Accessing the parser? Injection?

2008-11-04 Thread Scott Marlowe
On Tue, Nov 4, 2008 at 10:59 AM, Steve Atkins <[EMAIL PROTECTED]> wrote: > > On Nov 4, 2008, at 9:21 AM, Webb Sprague wrote: > >> Hi all, >> >> I am writing an application that allows users to analyze demographic >> and economic data, and I would like the users to be able to pick >> columns, transf

Re: [GENERAL] Semi-customized queries? Subset of SQL? Accessing the parser? Injection?

2008-11-04 Thread Steve Atkins
On Nov 4, 2008, at 9:21 AM, Webb Sprague wrote: Hi all, I am writing an application that allows users to analyze demographic and economic data, and I would like the users to be able to pick columns, transform columns with functions (economists take the logarithm of everything), and write custo

[GENERAL] Semi-customized queries? Subset of SQL? Accessing the parser? Injection?

2008-11-04 Thread Webb Sprague
Hi all, I am writing an application that allows users to analyze demographic and economic data, and I would like the users to be able to pick columns, transform columns with functions (economists take the logarithm of everything), and write customized WHERE and GROUP-BY clauses. This is kind of li