[Typo3] Seperate BE database connection

[Suman Debnath]

Hi Karsten,

Thanks for pointing out the part about the cache. I planned to give the FE 
DB user write access to the indexed_search related table/s but forgot about 
the cache. The problem is, the implementation is still a few days off and I 
don't get to test the stuff until then.

Warm Regards,
Suman Debnath

----- Original Message ----- 
From: "Karsten Dambekalns" <karsten at typo3.org>
To: "Suman Debnath" <suman at srijan.co.in>
Sent: Tuesday, May 17, 2005 7:28 PM
Subject: Re: [Typo3] Seperate BE database connection

>>Hi Suman.
>>
>>On Tuesday 17 May 2005 08:11, Suman Debnath wrote:
>>> This regards a specific installation where the FE has nothing (plug-in 
>>> or
>>> anything else) that needs write access to the DB. As you correctly
>>> surmised, the concern is security. Therefore, we were exploring the idea 
>>> of
>>> having a read-only access to the DB in FE and full access in the BE.
>>
>>Ok. But be aware of the fact that a strictly read-only FE cannot write 
>>pages
>>to the cache. This might impact your plan, even if you have no sessions or
>>data input otherwise. So you might need to make the cache table(s) 
>>writable.
>>
>>> However, today I have found a way [ maybe ] to do this. I am thinking of
>>> creating the same user with different IPs and with different privileges
>>> (For security the MySQL DB is in one server, Typo3 in another with 
>>> Apache
>>> for BE, Apache with Typo3 files mounted as read-only in another for FE).
>>> This should work. What do you think?
>>
>>Indeed, if you have distinct machines you can differentiate the 
>>permissions
>>with the IP address. Neat idea.
>>
>>Karsten
>>-- 
>>Karsten Dambekalns
>>TYPO3 Association - Active Member
>>http://association.typo3.org/
>>
>>"Karsten Dambekalns" <karsten at typo3.org> wrote in message 
>>news:mailman.1.1116245327.21147.typo3-english at lists.netfielders.de...
>>> Hi.
>>>
>>> Suman Debnath wrote:
>>>> Is it possible for Typo3 to have different DB connections (different
>>>> login/password) for the BE and FE?
>>>
>>> No, this isn't possible. Why would you want this? Security I suppose, 
>>> but
>>> what exactly do you expect from this?
>>>
>>> Karsten
>>> -- 
>>> Karsten Dambekalns
>>> TYPO3 Association - Active Member
>>> http://association.typo3.org/