Scriptcase for multi-tenant applications

[Giu]

@bradk

As you describe your application “lots of users who will use the application occasionally”, then perhaps multi-tenant is the best approach. The support costs of individual servers or databases will be high - perhaps too high for your business case.

I just spoke to a company who is using a multi-tenant approach in a security-sensitive application (I do not know if they are using SC for development, but PHP and other similar technologies are in their application stack). They serve lawyers and healthcare professionals so the risks of a security breach are very real and very costly. They are not a small company, so they have resources to manage infrastructure, develop their software, and manage their legal and insurance needs to protect them as well.

There are some good ideas in this thread on how to reduce the security risk. Another option is to add two-factor authentication to your application. Giu had an interesting idea to add a username field to every record and a where clause in every SQL statement to limit access.

When you solve this problem, please share the magic with all of us. We’d all like to know how to do this!

Not user as is, but a discriminatory field. Maybe you need multiple users connecting to the same database.

[ashballan]

This is a VERY interesting discussion. I was wondering if anyone has used SC to a host a SaaS product successfully?

[Dahlia]

Scriptcase can be a powerful tool for developing web applications, but it has limitations when it comes to creating multi-tenant (SaaS) applications. While Scriptcase excels in rapid development and ease of use, it does not natively support multi-tenancy out of the box. To handle multi-tenant needs, developers often implement custom solutions, such as using separate databases or schemas for each tenant, or incorporating tenant identification logic in the application layer. For more information on handling multiple tenants, you can refer to this blogpost. These approaches require additional planning and coding to ensure data isolation, security, and scalability.