Open shawnmjones opened 3 years ago
I tested this and can confirm adding these two lines to /opt/raintale/raintale_with_wooey/raintale_with_wooey/settings/user_settings.py and restarting the raintale-django service disables user registration and anonymous script access.
WOOEY_REGISTER_URL=None
WOOEY_ALLOW_ANONYMOUS=False
Now I just need to create a helper script to make this possible. Thanks for testing it.
This still needs work, but I am removing this from the project as part of the IIPC 2021 Grant project closeout.
As identified by @ato, an organization may only wish to accept Raintale templates from trusted individuals.
This will require two actions:
Addressing #1 will not be accomplished until we complete the Raintale GUI documentation.
Addressing #2 requires that an installer disable the
/accounts/register/
endpoint with the following steps.After reviewing Wooey's source code and testing locally, I've determined that the installer can disable that by setting
WOOEY_REGISTER_URL
toNone
. insidesettings/user_settings.py
.Finally, to ensure that only authenticated users are allowed to execute Raintale scripts, the installer will set
WOOEY_ALLOW_ANONYMOUS
fromsettings/user_settings.py
toFalse
.So, to summarize,
install-gui.sh
should:WOOEY_REGISTER_URL
toNone
insidesettings/user_settings.py
WOOEY_ALLOW_ANONYMOUS
toFalse
insidesettings/user_settings.py