Sorry if this is asked and answered before, is there away to password protected access to script/console ? I''ve seen a few posts on how to protect/encrypt the db passwords in database.yml, but that still leaves unprotected access to pretty much the same data via the console. -- Posted via http://www.ruby-forum.com/. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---
On Fri, 2007-03-09 at 02:39 +0100, Erik wrote:> Sorry if this is asked and answered before, is there away to password > protected access to script/console ? > > I''ve seen a few posts on how to protect/encrypt the db passwords in > database.yml, but that still leaves unprotected access to pretty much > the same data via the console.---- I put the rails_root directory in user space which would mean that you would have to log on as the user to access the console for a particular rails application. Craig --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---
Craig''s solution is best -- you can''t really password protect script/ console. Even if you restrict access there, you''ll need to worry about people who require your RAILS_ROOT/config/environment.rb into their scripts because that''ll give them access to all your models from within their scripts. If you really wanted to password protect the whole thing, you''ll need to setup some sort of scheme whereby your webserver passes in a key or something to your rails app on boot. This same key would need to be provided by script/console and whatever other scripts you have. All-in-all a huge headache. I''d go with Craig''s solution. On Mar 9, 10:19 am, Craig White <craigwh...-BQ75lA0ptkhBDgjK7y7TUQ@public.gmane.org> wrote:> On Fri, 2007-03-09 at 02:39 +0100, Erik wrote: > > Sorry if this is asked and answered before, is there away to password > > protected access to script/console ? > > I put the rails_root directory in user space which would mean that you > would have to log on as the user to access the console for a particular > rails application. > > Craig--~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---
Eden Li wrote:> Craig''s solution is best -- you can''t really password protect script/ > console. Even if you restrict access there, you''ll need to worry > about people who require your RAILS_ROOT/config/environment.rb into > their scripts because that''ll give them access to all your models from > within their scripts. > > All-in-all a huge headache. I''d go with Craig''s solution.It is a bit of headache, thanks for your answers -- Posted via http://www.ruby-forum.com/. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---