[Neo4j] Neo4j Rest server security

2010-09-06 Thread Richard Jones
Hi all, The standalone REST server is great for a proof of concept but unless I am missing something it has no security at all. Is this true? Is the standalone server meant to be production ready and have I missed something with security? My site is Django and needs to augment its MySQL

Re: [Neo4j] Using the REST neo4j

2010-09-06 Thread Jim Webber
Hi Alex, AFAIK the neo-rest stuff isn't intended for you to create your own resources at this point. It's a way of projecting an internal graph onto the big graph (i.e. the Web). If you're going to build your own RESTful service at this point, then go ahead an use something like Jersey and

Re: [Neo4j] Neo4j Rest server security

2010-09-06 Thread Jim Webber
Hi Richard, The standalone REST server is great for a proof of concept but unless I am missing something it has no security at all. Is this true? Yes, that's true. You can configure Jetty to do HTTPS things however, and I'm sure that we can get neo-rest updated to use HTTPS on a per-resource

Re: [Neo4j] Using the REST neo4j

2010-09-06 Thread Alexandru Popescu ☀
On Monday, September 6, 2010, Jim Webber j...@webber.name wrote: Hi Alex, AFAIK the neo-rest stuff isn't intended for you to create your own resources at this point. It's a way of projecting an internal graph onto the big graph (i.e. the Web). If you're going to build your own RESTful

Re: [Neo4j] Neo4j and Python

2010-09-06 Thread Alexandru Popescu ☀
I'm not familiar with JPype, but I assume it is a python-to-java thing. So I was wondering if jython would be an option for you as you'd be able to get rid of this cross language bridge? Maybe I'm a bit old style, but I'd definitely avoid by all means using custom cross language bridges and focus

Re: [Neo4j] Using the REST neo4j

2010-09-06 Thread Jim Webber
Hi Alex, Isn't it a pitty that I'll have to duplicate all this work? Could you elaborate on what you'd need to do to avoid duplication? Are you suggesting you'd like to sit in the same Jersey instance as the neo-rest service? Jim ___ Neo4j mailing

Re: [Neo4j] Using the REST neo4j

2010-09-06 Thread Alexandru Popescu ☀
On Mon, Sep 6, 2010 at 12:20 PM, Jim Webber j...@webber.name wrote: Hi Alex, Isn't it a pitty that I'll have to duplicate all this work? Could you elaborate on what you'd need to do to avoid duplication? Are you suggesting you'd like to sit in the same Jersey instance as the neo-rest

Re: [Neo4j] Using the REST neo4j

2010-09-06 Thread Jim Webber
Hi Alex, While I still can achieve all these with the current packaging, it feels more hacky: I need to create a new Jetty6BasedWebServer or modify the existing one to enhance it with my own stuff. Each change would require compiling and repackaging the whole neo4j-rest. Definitely not as

Re: [Neo4j] Using the REST neo4j

2010-09-06 Thread Alexandru Popescu ☀
On Monday, September 6, 2010, Jim Webber j...@webber.name wrote: Hi Alex, While I still can achieve all these with the current packaging, it feels more hacky: I need to create a new Jetty6BasedWebServer or modify the existing one to enhance it with my own stuff. Each change would require

Re: [Neo4j] neo4j.py with fulltext, lucene query, and sorting

2010-09-06 Thread Peter Neubauer
Michael, just talked to Tobias on merging your code into trunk. In order to do it, do you think you could add a test to it in order to add some basic documentation? Cheers, /peter neubauer COO and Sales, Neo Technology GTalk:      neubauer.peter Skype       peter.neubauer Phone       +46 704

Re: [Neo4j] list or tree ?

2010-09-06 Thread Peter Neubauer
Stephane, what kind of property or pattern are you matching on to establish the relationship between BR and BS? Cheers, /peter neubauer COO and Sales, Neo Technology GTalk:      neubauer.peter Skype       peter.neubauer Phone       +46 704 106975 LinkedIn   http://www.linkedin.com/in/neubauer

Re: [Neo4j] Neo4j Rest server security

2010-09-06 Thread Toby Matejovsky
You could encrypt django to neo4j-rest traffic with stunnel to thwart packet sniffing within your datacenter, and restrict neo4j-rest access to your private network interface (or specific known servers) with iptables to prevent access from arbitrary clients on the internet. This is the exact same

Re: [Neo4j] Combining Traverse/Index searching

2010-09-06 Thread Peter Neubauer
Josh, do you have any more specifics on your traversal needs? Yes, you could anytime do an index lookup in an Evaluator, the question is if there is a possibility to make bulk lookups and thus maybe save some time? Cheers, /peter neubauer COO and Sales, Neo Technology GTalk:     

Re: [Neo4j] Using the REST neo4j

2010-09-06 Thread Jim Webber
Hi Alex, Interesting... My main question is: what exactly is this package offering to the end user in the current form? IMO it cannot be an off-the-shelf product as there is no security. It is not a library either, as extending it is not so easy. Basically, and without any intention to harm

Re: [Neo4j] list or tree ?

2010-09-06 Thread Stephane Urdy
Peter Neubauer wrote: Stephane, what kind of property or pattern are you matching on to establish the relationship between BR and BS? Cheers, /peter neubauer COO and Sales, Neo Technology GTalk: neubauer.peter Skype peter.neubauer Phone +46 704 106975 LinkedIn

Re: [Neo4j] API Questions and a bit more

2010-09-06 Thread Andreas Kollegger
Hi Alexandra, Well, you're right that the reference node doesn't have any special properties or behaviors, except that it is the only node you can always get without knowing anything else about it. It's a common enough graphing pattern that it seems more convenient to have it by default. Either