intersystems / ipm

InterSystems ObjectScript Package Manager
MIT License
29 stars 19 forks source link

SQL API #264

Closed bdeboe closed 7 months ago

bdeboe commented 3 years ago

ZPM with its own command line and ObjectScript API (well, kind of) is very practical already, but we also (may) cater to an audience that's looking at IRIS as a relational database and uses SQL and nothing but SQL to access it. For this audience, ZPM remains an equally useful mechanism to pull in additional modules (after initial setup) and a basic SQL API for installing and listing modules may only be a small piece of dev work.

CALL %ZPM.Install('Samples-BI')

The one thing I ran into while taking a stab at this myself was that ZPM is really verbose, and saving the output to the spool device in order to save it to some log table was prevented by the frequent namespace switches in various helper methods.

bdeboe commented 3 years ago

this is just an idea that might not represent a terribly big user audience, but posting it here for feedback is more useful than just sitting on it :-)

isc-tleavitt commented 7 months ago

I'm going to say no on this, because it turns any almost-innocent SQL injection vulnerability an an almost-innocently misconfigured system into a catastrophe.