Password Protect or Relocate Admin Dashboard

IUBLibTech / newton_chymistry

New version of 'The Chymistry of Isaac Newton', using XProc pipelines to generate a website based on TEI XML encodings of Newton's alchemical manuscripts, and Apache Solr as a search engine.

2 stars 0 forks source link

Password Protect or Relocate Admin Dashboard #71

Closed mdalmau closed 4 years ago

mdalmau commented 4 years ago

To get to some basic admin features for the new Newton web site, one visits: https://newton.dlib.indiana.edu/admin. We need to either restrict access to this page or move some of these functions elsewhere.

Conal-Tuohy commented 4 years ago

I wrote an email to the chymistry list on Dec 10 with the subject "Re: Help! Me verify that mss currently unpublished or showing up in the new site". Among other things I suggested changing the various administrative functions so that the URLs all start with /admin, to make it simpler to restrict access to the full set using a front-end proxy. Still happy to do that.

randalldfloyd commented 4 years ago

For now, using Tomcat basic authentication configured for individual admin endpoints; deferring relocation of all admin functions under /admin until some additional problem or story calls for it.