On Wed, 14 Dec 2011, Andreas wrote:
> Hi,
>
> I asked elsewhere about the best way to store db credentials within a
> user-session of a web-app.
You might give this a read:
http://database-programmer.blogspot.com/2009/02/comprehensive-database-security-model.html
It goes through how using a DB user per app user would work.
I don't necessarily agree with it, but it's good reading.
-David