Hi Thuan,
I have done similar project in past.
We have assumed that there can be different types
of documents (.doc embedded with different components like images etc, .html
files anything). So we were little reluctant in using the capabilities of
Database server (unless you are using high proifile DB like Oracle). We
decided to store them as files on server which can be shown or allowed for
download after user is authenticated.
As it is said, "A bit of layer in computer
science solves all the problem". We removed all the permissions for public to
the root folder containing these documents, so this resolves the issue of
accessing the document directly through URL. Permissions are given only
to application server user. So End User (Logging in system) is authorized
and authenticated by application running in the application server, if
authenticated for the request odf document, apllication server user serves the
asked document to end user. Only difference is the channel through which end
user is given access.
This system is still running very succesful. Hope
this works for you even.
FYI, there is no Database server available which
can serve all the capabilities of File server (so far as per my knowledge,
please update me if I am missing any development)
Thanks
Arvind Bir
----- Original Message -----
Sent: Friday, September 26, 2003 6:54
PM
Subject: Serving files
Hi
all, my current project is for a law company that wants to upload document
files contains legal information of their customers (balance of the company,
fiscal position, taxes paid/to be paid etc.) and let the customers to access
those files online.
Because
every customer will have their own username and password to access only
their own documents, I think the document will be stored into a database and
let the customers download instead of saving as a file on server. That way,
the customer will not be able to access files by typing URL address.
My
problem is I don’ know if MySQL is strong enough
to handle the file serving task. Does anyone have any idea? What is the most
secure way to let the customer access their
files?
Thanks
in advance.
Thuan
Nguyen
------------------------------------------------------------------------------
This
email is confidential and may be legally privileged.
It is intended
solely for the addressee. Access to this email by anyone else, unless
expressly approved by the sender or an authorized addressee, is
unauthorized.
If you are not the intended recipient, any disclosure,
copying, distribution or any action omitted or taken in reliance on it, is
prohibited and may be unlawful. If you believe that you have received this
email in error, please contact the sender, delete this e-mail and destroy
all
copies.
==============================================================================
===========================================================================
To unsubscribe, send email to listserv@java.sun.com and include in the body
of the message "signoff J2EE-INTEREST". For general help, send email to
listserv@java.sun.com and include in the body of the message "help".
===========================================================================
To unsubscribe, send email to listserv@java.sun.com and include in the body
of the message "signoff J2EE-INTEREST". For general help, send email to
listserv@java.sun.com and include in the body of the message "help".
===========================================================================
To unsubscribe, send email to listserv@java.sun.com and include in the body of
the message "signoff J2EE-INTEREST". For general help, send email to
listserv@java.sun.com and include in the body of the message "help".
