Hacker News new | ask | show | jobs
by mx_02 1023 days ago
Isnt that as easy as giving a non-write user to the app?
1 comments

This is another way to make sure that the app doesn't overstep it's permissions,

It's still very valid feedback, on our side we should make the permissions of each user very clear and make it clearer that we only do select queries. Will make sure to make those changes! Thanks for the feedback!

This reply gives me a bit of anxiety. Solving this should have been one of the most important things regarding something like this
Surely you wouldn't give a third party analytics app write access to your prod DB? It would be a nice UX improvement if the app checked the permissions and gave you instructions on how to set the permissions properly, but this seems to be entirely at the level of setting it up correctly.
Obviously, generating queries from natural language should be the most important thing

And providing the user interface to do that

I think I would be okay with not having the ability to generate queries from natural language if it came with the possibility of my data randomly getting clobbered!