O'Reilly logo

Take My Money by Noel Rappin

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Keeping Data Secure

I hope at this point you are starting to get a feel for how our business logic and administrative tools have implications for the integrity of our data. Our little theater does not have tremendously complex business logic yet, and yet if we were asked to verify the status of our records manually, we’d have some trouble.

Not only do our administrators have the ability to set a price on any purchase, as the application is currently written, they also have the ability to go into the ActiveAdmin UI and change the details of any purchase that has already happened. And even if we were to limit that kind of access to the administrative tools, there’s still always a way to get in. Somebody might be able to access the Rails console ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required