[Toaster] question about authentication

Bian, Naimeng biannm at cn.fujitsu.com
Wed Sep 23 17:44:06 PDT 2015



> -----Original Message-----
> From: Brian Avery [mailto:avery.brian at gmail.com]
> Sent: Tuesday, September 01, 2015 11:48 PM
> To: Barros Pena, Belen
> Cc: Bian, Naimeng/卞 乃猛; toaster at yoctoproject.org
> Subject: Re: [Toaster] question about authentication
> 
> In the sort term (though I haven't tested this), I think you can restrict access
> via apache if you run toaster using wsgi. The built in Django server isn't made
> for production use, so if you are concerned with security this is probably a
> better configuration anyway.
> Here's a googled link about this in case it helps:
> https://community.webfaction.com/questions/256/apache-basic-authentication
> -for-mod_wsgi-inc-django-applications
> 
> If this does work (or works with some changes) it would be great if you let
> us know!
> 

Sorry for my late.
I have confirmed that the apache-basic-authentication can work without any changes from
https://community.webfaction.com/questions/256/apache-basic-authentication-for-mod_wsgi-inc-django-applications

Thanks
 Bian

> -brian
> 
> On Tue, Sep 1, 2015 at 1:51 AM, Barros Pena, Belen <belen.barros.pena at intel.com>
> wrote:
> >
> >
> > On 01/09/2015 00:58, "toaster-bounces at yoctoproject.org on behalf of
> > Bian, Naimeng" <toaster-bounces at yoctoproject.org on behalf of
> > biannm at cn.fujitsu.com> wrote:
> >
> >>Hi all
> >>
> >>Does toaster support permission management in Build Mode?
> >
> > No, I'm afraid it doesn't.
> >
> >>
> >>
> >>The permission management what I want to talk about is not
> >>http://toaster-server:8000/admin.
> >>My question is that is there any login page for authentication.
> >>
> >>If not, does it mean everyone who can access Toaster server can do
> >>everything including create/edit Project.
> >
> > Right now, yes: whomever can access the Toaster instance can create
> > and modify projects, run builds and download artifacts.
> >
> >>and do we have any plan to do it.
> >
> > Yes, this is something we have been wanting to do for a while, but
> > haven't been able to for lack of development resources. We even have
> > some designs for a project-based basic permissions system providing 3
> > user types (administrators, project creators and basic users). We also
> > have a Bugzilla entry to cover the work:
> >
> > https://bugzilla.yoctoproject.org/show_bug.cgi?id=6233
> >
> > If you would be interested in working on this, let me know. I would be
> > happy to share and discuss the proposed design.
> >
> > Cheers
> >
> > Belén
> >
> >>
> >>If so, would you telling me how to use it.
> >>
> >>Thanks
> >> Bian
> >>--
> >>_______________________________________________
> >>toaster mailing list
> >>toaster at yoctoproject.org
> >>https://lists.yoctoproject.org/listinfo/toaster
> >
> > --
> > _______________________________________________
> > toaster mailing list
> > toaster at yoctoproject.org
> > https://lists.yoctoproject.org/listinfo/toaster


More information about the toaster mailing list