Servoy admin page security

Forum to discuss the Web client version of Servoy.

Servoy admin page security

Postby lwjwillemsen » Thu Nov 23, 2017 12:56 pm

Is there a way to exclude access to the Servoy admin page (servoy-admin) for users who can connect to the web-client through internet?

Or:

Is there a way to grant access to the Servoy admin page (servoy-admin) only from localhost (Servoy Application Server)?

Regards,
Lambert Willemsen
Vision Development BV
lwjwillemsen
 
Posts: 577
Joined: Sat Mar 14, 2009 5:39 pm
Location: The Netherlands

Re: Servoy admin page security

Postby jcompagner » Thu Nov 23, 2017 1:06 pm

only admin users are allowed..
So i guess all your normal users that you have in your webclient are not servoy admin users right?
Johan Compagner
Servoy
User avatar
jcompagner
 
Posts: 8010
Joined: Tue May 27, 2003 7:26 pm
Location: The Internet

Re: Servoy admin page security

Postby lwjwillemsen » Fri Nov 24, 2017 9:26 am

Hi Johan,

I meant a way to 'block' the servoy-admin login window or to 'hide' the /servoy-admin url for ip numbers other than localhost.
Lambert Willemsen
Vision Development BV
lwjwillemsen
 
Posts: 577
Joined: Sat Mar 14, 2009 5:39 pm
Location: The Netherlands

Re: Servoy admin page security

Postby jcompagner » Fri Nov 24, 2017 12:48 pm

This is really more a firewall issue to the outside world, because what is "localhost" pure really localhost? If i just have a server with no ui at all? (which is very common)
then i am mostly on the local area network of that server and i do want then to access it
But everything from the ouside world should be blocked.
So this is really more a DMZ/Firewall problem then a pure tomcat problem

But for tomcat you have a configuration where you can do this:

http://tomcat.apache.org/tomcat-7.0-doc ... ess_Filter

so in your global web.xml (conf/web.xml) you can add the above filter when configured it right (so the url mapping shouild then be servoy-admin)
Johan Compagner
Servoy
User avatar
jcompagner
 
Posts: 8010
Joined: Tue May 27, 2003 7:26 pm
Location: The Internet

Re: Servoy admin page security

Postby lwjwillemsen » Fri Nov 24, 2017 1:20 pm

Thanks for this info Johan!
Lambert Willemsen
Vision Development BV
lwjwillemsen
 
Posts: 577
Joined: Sat Mar 14, 2009 5:39 pm
Location: The Netherlands


Return to Servoy Web Client

Who is online

Users browsing this forum: No registered users and 3 guests

cron