Fork me on GitHub
#sql
<
2018-01-10
>
itaied16:01:42

A question regarding not clojure in specific, but still, where would you validate and check the data? In the database or the web application (business logic tier)? Null checks (column)? Uniqueness? Positive number less than 30? Enums? I am very confused in the role the application logic plays, in specific data validations

noisesmith18:01:42

my rule of thumb is to do appropriate validations at system boundaries - if you drew a big diagram of what the parts of your application are (including frontend, server side, database, services / apis, etc.) any flow of data that goes between two parts should have some sort of validation on the data coming in

seancorfield20:01:59

In addition (and I meant to answer this much earlier @itaied sorry), I would distinguish between inherent properties of the data itself (non-nil, positive number in a given range) and system context properties (uniqueness of keys) -- and I would validate the inherent properties in code wherever the data originates into the system (computed, inbound arguments, etc), and then weigh the pros and cons of attempting system context checks in code vs the database. For example, if you care about uniqueness, testing for it up front and avoiding a bunch of work will sometimes be worth it, compared to just letting an insert! fail (and ensuring you can catch the failure and determine it was a specific uniqueness constraint violation).

seancorfield20:01:06

So "it depends" 🙂

seancorfield21:01:23

For example, in our dating platform, we require usernames to be globally unique and email addresses to be unique per site. So on the forms where members input those values, we do ajax calls to our API to see if the uniqueness criteria is met and let them know before they even submit the form (and we'll also trap an insert! failure and communicate back to the member that an error occurred but it may not be as specific). In that situation, the chance of a uniqueness check on the form data passing but the constraint on the DB failing in the short space of time taken to process the form is low enough that the trade off is worth it.

seancorfield21:01:11

We have other situations where we try an insert! and if it fails, we fall back to an update!.