Give that OrientDB exposes a REST HTTP API, and that it seems to have quite a few security features, what are the (especially security) implications of querying OrientDB directly from a front end web application, without writing and using an intermediary back-end between them?
What possible measures (like record access management, HTTPS, authentication configuration etc) will improve security and, after implementing them, what risks remain?