This shows you the differences between two versions of the page.
Both sides previous revision Previous revision | |||
rootdir_security [2022/08/06 19:41] yves [Accessing secured content] |
rootdir_security [2023/11/21 16:14] (current) chris |
||
---|---|---|---|
Line 1: | Line 1: | ||
===== Security ===== | ===== Security ===== | ||
- | Security is increasingly important. As PMA.core has been deployed in increasingly complex scenarios over the years, its security features have evolved, too. | + | Security is increasingly important. As PMA.core has been deployed in ever-more complex scenarios over the years, its security features have evolved, too. |
Security pertaining to root-directories is situated at two levels: | Security pertaining to root-directories is situated at two levels: | ||
Line 23: | Line 23: | ||
==== Public vs private ==== | ==== Public vs private ==== | ||
- | As you have more [[user_management|users]] and more root-directories, it becomes undesirable that everybody is allowed to see everything. | + | As you grow your number of [[user_management|users]] and root-directories, you might want to change the default setting that everybody is allowed to see everything. |
Therefore, root-directories can be marked "public" or "private": | Therefore, root-directories can be marked "public" or "private": | ||
Line 29: | Line 29: | ||
{{ :rootdir_public_private_switch.png?direct&200 |}} | {{ :rootdir_public_private_switch.png?direct&200 |}} | ||
- | Public root directories are marked "public", it means every user has access to them. They can be accessed by anybody who is a registered user in [[user_management|the PMA.core user repository]]. | + | Public root directories are marked "public", this means every user has access to them. They can be accessed by anybody who is a registered user in [[user_management|the PMA.core user repository]]. |
- | Private root directories are marked "private", it means only select users can see the content. They are only accessible by those who have been explicitly given access to be allowed to access the folder through the directory's [[rootdir_security#access_control_list|access control list]]. | + | Private root directories are marked "private", which means only select users can see the content. Private root dirs are only accessible by those who have been explicitly given access to the folder through the directory's [[rootdir_security#access_control_list|access control list]]. |
==== Access control lists ==== | ==== Access control lists ==== | ||
- | Once marked private, you can select what users are allowed to see the content of the root directory, and which ones aren't: Do this by pressing the "Edit access control list" link after you selected the "private" option: | + | Once marked private, you can select which users are allowed to see the content of a given root directory, and which ones aren't: Do this by pressing the "Edit access control list" link after you have selected the "private" option: |
{{ :acl.png?nolink&400 |}} | {{ :acl.png?nolink&400 |}} | ||
Line 43: | Line 43: | ||
{{ :rootdir_acl_20.png?direct&400 |}} | {{ :rootdir_acl_20.png?direct&400 |}} | ||
- | As you get even more root-directories and more users, it is useful to get an overview of who has access to what. For that, you can request the ACL report from the root-directories view. | + | It is useful to get an overview of who has access to what. For that, you can request the ACL report from the root-directories view. |
{{ :overview.png?nolink&400 |}} | {{ :overview.png?nolink&400 |}} |