I have an app that has Basecamp-style subdomains, that is, I have Projects, Users, Apples and Oranges. The Users, Apples and Oranges are all keyed to a Project and only exist in the http://project.myapp.com. I added a project_id to Users, Apples and Oranges and everything works, except of course that the ids of those three objects increment globally, and throughout my app I lookup objects by that id.
This doesn’t seem like best practice. Should I instead do lookups by a secondary key? How does that affect efficiency? If there’s a good blog post that covers this, would be wesome.
It is ok to have a global id (in the database). If possible, don’t show those database ids, use friendly urls instead.
Anyways, you shouldn’t trust your users: even if you have the id, check if the record is associated with the project.