Hacker News new | ask | show | jobs
by MillstoneX 4237 days ago
I like that ArangoDB can be extended by micro services. Does this not raise security concerns, because user code is executed on the DB server?
1 comments

This is an argument one often hears. However, V8 is encapsulated quite well, since chrome has the same issue.

Furthermore, these micro services can actually improve security: You can implement your own scheme for authentication and authorisation on the document level and deploy it to the database. Then, if your application has various clients for different devices, they are all authorized in the same way by the same code. This leads to a simplification in app development and thus to more security, because there are fewer places to get right and the whole approach is less error prone.