Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
documentation:latest:viewer [2019/09/03 08:30]
cmaudoux created
documentation:latest:viewer [2019/09/03 10:04] (current)
Line 13: Line 13:
 defaultModule = viewer defaultModule = viewer
  
-viewerHiddenKeys = samlIDPMetaDataNodes+viewerHiddenKeys = samlIDPMetaDataNodes ​samlSPMetaDataNodes managerPassword ManagerDn globalStorageOptions persistentStorageOptions
 viewerAllowBrowser = $groups =~ /\bsu\b/ viewerAllowBrowser = $groups =~ /\bsu\b/
 viewerAllowDiff = $groups =~ /\bsu\b/ viewerAllowDiff = $groups =~ /\bsu\b/
Line 19: Line 19:
  
   * **Parameters**:​   * **Parameters**:​
-    * **enabledModules**:​  +    * **enabledModules**: ​list of modules to enable 
-    * **defaultModule**:​  +    * **defaultModule**: ​module displayed by default route (http://​manager.example.com/​manager.(fcgi|psgi) 
-    * **viewerHiddenKeys**:​  +    * **viewerHiddenKeys**: ​keys not displayed by Viewer 
-    * **viewerAllowBrowser**:​  +    * **viewerAllowBrowser**: ​allow to browse other configurations 
-    * **viewerAllowDiff**: ​+    * **viewerAllowDiff**: ​enable "​difference with previous"​ link 
  
 <note warning> <note warning>
 +
 +You have to set access rules to allow/deny users to access modules.
 +
 +In Manager:
 +* Declare a Virtual Host : manager.example.com
 +* Set an access rule for each enabled module :
 +  - Configuration : ^/​(.*?​\.(fcgi|psgi)/​)?​(manager\.html|confs|$) ​ =  $uid eq '​dwho'​
 +  - Notifications : ^/​(.*?​\.(fcgi|psgi)/​)?​notifications ​ =  $uid eq '​dwho'​
 +  - Sessions : ^/​(.*?​\.(fcgi|psgi)/​)?​sessions ​ =  $uid eq '​dwho'​
 +  - Viewer : ^/​(.*?​\.(fcgi|psgi)/​)?​viewer ​ =  $uid =~ /​\b(?:​dwho|rtyler)\b/​
 +  - Default : $uid =~ /​\b(?:​dwho|rtyler)\b/​
  
 </​note>​ </​note>​
  
 <note important>​ <note important>​
 +To avoid that Read-Only users can access to configuration module by using default route, 
 +keep in mind to set '​defaultModule'​ option
 </​note>​ </​note>​