Re: some questions

[Adam Jacob <adam@opscode.com>]

On Wed, Apr 22, 2009 at 7:17 PM, David Lee <david.lee@kanji.com.au> wrote:
> As a side note, there's no ORM for chef is there? IE, rather than being able
> to use something like ActiveRecord, the complexity Miguel is flagging must
> be dealt with directly via ferret searches(?)

I'm not sure I understand how the search indexes help solve Miguel's problem?

> I'd agree with Miguel that his approach makes sense to solve the security
> problem he raised; tags / roles / etc seems like a separate set of
> enhancements best considered afterwards, in the interests of improving
> security as quickly as possible.

I think he's totally on the right track for what the sort of controls
need to be - I'm nervous about how it gets implemented, particularly
if it's some sort of server-side processing of cookbook contents.

Adam

-- 
Opscode, Inc.
Adam Jacob, CTO
T: (206) 508-4759 E: adam@opscode.com