semi-deploy mode for Pier...

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

semi-deploy mode for Pier...

LawsonEnglish
I'm working on a website using Pier but I need to continue to use the
development tools after I deploy. However, I can't seem to get rid of
the button bar at the bottom that gives me access to halos and whatnot,
even if I'm not logged in as a super user/admin type.


I know there's been a lot of discussion about this, but I have a hard
time following it. I *really* need to have the site live, but still be
able to work on it without that "halo" back door showing on every page.
There are likely other security issues with this "semi-deployment" mode
and if someone could list them or point me to a discussion of them, I'd
be thankful..

Thanks.



Lawson
_______________________________________________
Magritte, Pier and Related Tools ...
https://www.iam.unibe.ch/mailman/listinfo/smallwiki
Reply | Threaded
Open this post in threaded view
|

Re: semi-deploy mode for Pier...

LawsonEnglish
I should add that I'm using Pier 2.0 and Seaside 3.0...

On 7/27/10 10:47 AM, Lawson English wrote:

> I'm working on a website using Pier but I need to continue to use the
> development tools after I deploy. However, I can't seem to get rid of
> the button bar at the bottom that gives me access to halos and
> whatnot, even if I'm not logged in as a super user/admin type.
>
>
> I know there's been a lot of discussion about this, but I have a hard
> time following it. I *really* need to have the site live, but still be
> able to work on it without that "halo" back door showing on every
> page. There are likely other security issues with this
> "semi-deployment" mode and if someone could list them or point me to a
> discussion of them, I'd be thankful..
>
> Thanks.
>
>
>
> Lawson
> _______________________________________________
> Magritte, Pier and Related Tools ...
> https://www.iam.unibe.ch/mailman/listinfo/smallwiki
>

_______________________________________________
Magritte, Pier and Related Tools ...
https://www.iam.unibe.ch/mailman/listinfo/smallwiki
Reply | Threaded
Open this post in threaded view
|

Re: semi-deploy mode for Pier...

Nick
On 7/27/10 10:47 AM, Lawson English wrote:
I'm working on a website using Pier but I need to continue to use the development tools after I deploy. However, I can't seem to get rid of the button bar at the bottom that gives me access to halos and whatnot, even if I'm not logged in as a super user/admin type.


I know there's been a lot of discussion about this, but I have a hard time following it. I *really* need to have the site live, but still be able to work on it without that "halo" back door showing on every page. There are likely other security issues with this "semi-deployment" mode and if someone could list them or point me to a discussion of them, I'd be thankful..


point your browser to:
\config
select your application (from the list on the LHS)
under "General" you'll see "Root Decoration Classes" - the associated list should contain WAToolDecoration. This is adding the button bar to your application. You need to remove it.
click on the associated Configure button
click Override
remove WAToolDecoration from the the "current" list.

I'd remove the applications you don't need running eg examples, browse, comet, magritte, javascript, tests, welcome
Then at a minimum password protect the applications you're planning to leave in place eg config, tools with:
WAAdmin>>register: aComponentClass asApplicationAt: aString user: user password: password 

HTH

Nick 

_______________________________________________
Magritte, Pier and Related Tools ...
https://www.iam.unibe.ch/mailman/listinfo/smallwiki
Reply | Threaded
Open this post in threaded view
|

Re: semi-deploy mode for Pier...

LawsonEnglish
Thanks.

On 7/27/10 11:21 AM, Nick Ager wrote:
On 7/27/10 10:47 AM, Lawson English wrote:
I'm working on a website using Pier but I need to continue to use the development tools after I deploy. However, I can't seem to get rid of the button bar at the bottom that gives me access to halos and whatnot, even if I'm not logged in as a super user/admin type.


I know there's been a lot of discussion about this, but I have a hard time following it. I *really* need to have the site live, but still be able to work on it without that "halo" back door showing on every page. There are likely other security issues with this "semi-deployment" mode and if someone could list them or point me to a discussion of them, I'd be thankful..


point your browser to:
\config
select your application (from the list on the LHS)
under "General" you'll see "Root Decoration Classes" - the associated list should contain WAToolDecoration. This is adding the button bar to your application. You need to remove it.
click on the associated Configure button
click Override
remove WAToolDecoration from the the "current" list.

I'd remove the applications you don't need running eg examples, browse, comet, magritte, javascript, tests, welcome
Then at a minimum password protect the applications you're planning to leave in place eg config, tools with:
WAAdmin>>register: aComponentClass asApplicationAt: aString user: user password: password 

HTH

Nick 


_______________________________________________
Magritte, Pier and Related Tools ...
https://www.iam.unibe.ch/mailman/listinfo/smallwiki