[Toaster] question about authentication

[Brian Avery]

In the sort term (though I haven't tested this), I think you can
restrict access via apache if you run toaster using wsgi. The built in
Django server isn't made for production use, so if you are concerned
with security this is probably a better configuration anyway.
Here's a googled link about this in case it helps:
https://community.webfaction.com/questions/256/apache-basic-authentication-for-mod_wsgi-inc-django-applications

If this does work (or works with some changes) it would be great if
you let us know!

-brian

On Tue, Sep 1, 2015 at 1:51 AM, Barros Pena, Belen
<belen.barros.pena at intel.com> wrote:
>
>
> On 01/09/2015 00:58, "toaster-bounces at yoctoproject.org on behalf of Bian,
> Naimeng" <toaster-bounces at yoctoproject.org on behalf of
> biannm at cn.fujitsu.com> wrote:
>
>>Hi all
>>
>>Does toaster support permission management in Build Mode?
>
> No, I'm afraid it doesn't.
>
>>
>>
>>The permission management what I want to talk about is not
>>http://toaster-server:8000/admin.
>>My question is that is there any login page for authentication.
>>
>>If not, does it mean everyone who can access Toaster server can do
>>everything including create/edit Project.
>
> Right now, yes: whomever can access the Toaster instance can create and
> modify projects, run builds and download artifacts.
>
>>and do we have any plan to do it.
>
> Yes, this is something we have been wanting to do for a while, but haven't
> been able to for lack of development resources. We even have some designs
> for a project-based basic permissions system providing 3 user types
> (administrators, project creators and basic users). We also have a
> Bugzilla entry to cover the work:
>
> https://bugzilla.yoctoproject.org/show_bug.cgi?id=6233
>
> If you would be interested in working on this, let me know. I would be
> happy to share and discuss the proposed design.
>
> Cheers
>
> Belén
>
>>
>>If so, would you telling me how to use it.
>>
>>Thanks
>> Bian
>>--
>>_______________________________________________
>>toaster mailing list
>>toaster at yoctoproject.org
>>https://lists.yoctoproject.org/listinfo/toaster
>
> --
> _______________________________________________
> toaster mailing list
> toaster at yoctoproject.org
> https://lists.yoctoproject.org/listinfo/toaster