Developer Forums Previous Topic Next Topic
Title:
Changes to attachments system

Content:
The attachments system in Qrimp has been changed:

"
Important Changes September 01, 2009
Please note that the attachment system has changed to include the movement of attached items to a Content Delivery Network.

Your attachments will now have a full url including HTTP:// and a server name. Use this full url in Skins and when linking to them from other areas of your Qrimp app. The new system is in beta mode. Please contact Qrimp support if you have any questions.
"

I have two concerns about this.

The first is entirely pragmatic. I've just added two attachments to my Resource table - but I can't actually see them in either List or Edit views. Where have they gone to? Is the Content Delivery Network asynchronous?

The second concern is fundamental. I intend using attachments to enable students to submit work for teachers to assess. The attachments have got (in my view) to follow the standard Qrimp security rules; that is, only a user with the appropriate permissions to see / edit a table should be able to see the associated attachments. Otherwise one student will be able to guess at an attachment URL and access it, potentially corrupting the other student's work or at least making it possible to steal it.

Are attachments still only visible via Qrimp? Or does the fact that a URL is generated not open the possibility that "anyone" can see the associated content?

replies



createdate:
11/1/2009 1:29:23 AM

createid:
gregory