We have assumed that there can be different types
of documents (.doc embedded with different components like images etc, .html
files anything). So we were little reluctant in using the capabilities of
Database server (unless you are using high proifile DB like Oracle). We decided
to store them as files on server which can be shown or allowed for download
after user is authenticated.
As it is said, "A bit of layer in computer science
solves all the problem". We removed all the permissions for public to the root
folder containing these documents, so this resolves the issue of accessing the
document directly through URL. Permissions are given only to application
server user. So End User (Logging in system) is authorized and authenticated by
application running in the application server, if authenticated for the request
odf document, apllication server user serves the asked document to end user.
Only difference is the channel through which end user is given
access.
This system is still running very succesful. Hope
this works for you even.
FYI, there is no Database server available which
can serve all the capabilities of File server (so far as per my knowledge,
please update me if I am missing any development)
Hi
all, my current project is for a law company that wants to upload document
files contains legal information of their customers (balance of the company,
fiscal position, taxes paid/to be paid etc.) and let the customers to access
those files online.
Because
every customer will have their own username and password to access only their
own documents, I think the document will be stored into a database and let the
customers download instead of saving as a file on server. That way, the
customer will not be able to access files by typing URL address.
My
problem is I don’ know if MySQL is strong enough to
handle the file serving task. Does anyone have any idea? What is the most
secure way to let the customer access their
files?
This
email is confidential and may be legally privileged.
It is intended
solely for the addressee. Access to this email by anyone else, unless
expressly approved by the sender or an authorized addressee, is
unauthorized.
If you are not the intended recipient, any disclosure,
copying, distribution or any action omitted or taken in reliance on it, is
prohibited and may be unlawful. If you believe that you have received this
email in error, please contact the sender, delete this e-mail and destroy all
copies.
===========================================================================
To unsubscribe, send email to listserv@java.sun.com and include in the body of
the message "signoff J2EE-INTEREST". For general help, send email to
listserv@java.sun.com and include in the body of the message "help".
===========================================================================
To unsubscribe, send email to listserv@java.sun.com and include in the body of
the message "signoff J2EE-INTEREST". For general help, send email to
listserv@java.sun.com and include in the body of the message "help".
===========================================================================
To unsubscribe, send email to listserv@java.sun.com and include in the body
of the message "signoff J2EE-INTEREST". For general help, send email to
listserv@java.sun.com and include in the body of the message "help".
