| | 16 | |
| | 17 | If your project's URL is '''http://a.b.c/test''', |
| | 18 | then the URL of the admin web interface is '''http://a.b.c/test_ops'''. |
| | 19 | The directory containing the admin pages is '''~/projects/test/html/ops/'''. |
| | 20 | |
| | 21 | Because the admin interface lets you do things like |
| | 22 | see user email addresses, it's extremely important that it be secure. |
| | 23 | There are two levels of protection: |
| | 24 | |
| | 25 | == Protection by .htaccess == |
| | 26 | |
| | 27 | When a project is created, a file '''html/ops/.htaccess''' is created |
| | 28 | that disallows access to the admin web interface. |
| | 29 | You can use '''htpasswd''' to create a '''.htpasswd''' file containing |
| | 30 | credentials for yourself. |
| | 31 | |
| | 32 | == Project-defined protection policy == |
| | 33 | |
| | 34 | The project-specific config file '''html/project/project.inc''' |
| | 35 | contains a function '''auth_ops()''' that defines |
| | 36 | a project-specific policy for protecting the admin interface. |
| | 37 | By default, no access is allowed; |
| | 38 | you'll need to edit this function to specify your project's policy. |
| | 39 | |
| | 40 | Existing projects: look at '''html/project.sample/project.inc''', |
| | 41 | copy the '''auto_ops()''' function into your project.inc file, |
| | 42 | and edit it to specify your project's policy. |