User Tools

Site Tools


rootdir_security

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
rootdir_security [2022/08/06 19:41]
yves [Accessing secured content]
rootdir_security [2023/11/21 16:14] (current)
chris
Line 1: Line 1:
 ===== Security ===== ===== Security =====
  
-Security is increasingly important. As PMA.core has been deployed in increasingly ​complex scenarios over the years, its security features have evolved, too.+Security is increasingly important. As PMA.core has been deployed in ever-more ​complex scenarios over the years, its security features have evolved, too.
  
 Security pertaining to root-directories is situated at two levels: Security pertaining to root-directories is situated at two levels:
Line 23: Line 23:
 ==== Public vs private ==== ==== Public vs private ====
  
-As you have more [[user_management|users]] and more root-directories, ​it becomes undesirable ​that everybody is allowed to see everything.+As you grow your number of [[user_management|users]] and root-directories, ​you might want to change the default setting ​that everybody is allowed to see everything.
  
 Therefore, root-directories can be marked "​public"​ or "​private":​ Therefore, root-directories can be marked "​public"​ or "​private":​
Line 29: Line 29:
 {{ :​rootdir_public_private_switch.png?​direct&​200 |}} {{ :​rootdir_public_private_switch.png?​direct&​200 |}}
  
-Public root directories are marked "​public", ​it means every user has access to them. They can be accessed by anybody who is a registered user in [[user_management|the PMA.core user repository]].+Public root directories are marked "​public", ​this means every user has access to them. They can be accessed by anybody who is a registered user in [[user_management|the PMA.core user repository]].
  
-Private root directories are marked "​private", ​it means only select users can see the content. ​They are only accessible by those who have been explicitly given access to be allowed to access ​the folder through the directory'​s [[rootdir_security#​access_control_list|access control list]].+Private root directories are marked "​private", ​which means only select users can see the content. ​Private root dirs are only accessible by those who have been explicitly given access to the folder through the directory'​s [[rootdir_security#​access_control_list|access control list]].
  
 ==== Access control lists ==== ==== Access control lists ====
  
-Once marked private, you can select ​what users are allowed to see the content of the root directory, and which ones aren'​t:​ Do this by pressing the "Edit access control list" link after you selected the "​private"​ option:+Once marked private, you can select ​which users are allowed to see the content of a given root directory, and which ones aren'​t:​ Do this by pressing the "Edit access control list" link after you have selected the "​private"​ option:
  
 {{ :​acl.png?​nolink&​400 |}} {{ :​acl.png?​nolink&​400 |}}
Line 43: Line 43:
 {{ :​rootdir_acl_20.png?​direct&​400 |}} {{ :​rootdir_acl_20.png?​direct&​400 |}}
  
-As you get even more root-directories and more users, it is useful to get an overview of who has access to what. For that, you can request the ACL report from the root-directories view.+It is useful to get an overview of who has access to what. For that, you can request the ACL report from the root-directories view.
  
 {{ :​overview.png?​nolink&​400 |}} {{ :​overview.png?​nolink&​400 |}}
rootdir_security.1659804060.txt.gz ยท Last modified: 2022/08/06 19:41 by yves