RESTful web services with mysql problem

[nbisalehalli]

Could anyone please tell me how to use RESTful Web services to query more than one table in mysql? All examples I find use only one table to demonstrate the concept of exposing the database as a web service. How do we perform JOINS on multiple mysql tables in RESTful Web services?

[Jeff Rubinoff]

Could anyone who answers this please cc me?

Jeff

nbisalehalli wrote:

[Arshad Noor]

One way to solve this problem is to create a Session EJB that
interposes itself between the web-service and the database.
There are multiple advantages with this model:

1) You have significantly more flexibility with JPQL
statements in the EJB, and can join as many tables as you
wish, while returning exactly what you process in the EJB
through the web-service;
2) You create a level of indirection to the database that
shields your web-service consumers from schema changes in
the database;
3) This same indirection gives you new-found flexibility to
add new business-logic into the EJB without necessarily
having to change your web-service (if business rules don't
require it);
4) You can scale much better by managing the number of EJBs
than by trying to manage the number of listeners for the
web-service;
5) Most importantly, a major security vulnerability - SQL
Injection attacks - is rendered useless because the EJB
can be written to reject SQL/JPQL statements in input
parameters (since it will have its own JPQL named-queries
that do the actual work with the database).

There may be other reasons that I cannot think of on the spur
of the moment, but I would strongly recommend using a Session
EJB to support the web-service. With JEE5 and NB 6.x, this
model is so much easier to build and deploy (than J2EE 1.4).

Arshad Noor
StrongAuth, Inc.

[nbisalehalli]

Thank you much for your reply Arshad.