-
Notifications
You must be signed in to change notification settings - Fork 24
Admin Functions
At present Umlaut only has one admin function, and it's kind of experimental at that: Report on Service errors.
It's been an idea to also add some simple statistics, may happen in the future.
The admin functions are not accessible by default. This is in part because of unclear issues with protecting admin functions from unauthorized users. We have a bit of protection, but it's not entirely thought through and you need to turn it on manually.
To turn on admin functions, edit your local ./config/routes.rb file, and edit the Umlaut::Routes line to enable routing to admin functions:
Umlaut::Routes.new(self, :admin => true).draw
By default, admin functions will require https access in production environment (but not others), but not require any login. You can change https-require and add a single login/password (via http basic auth) for admin functions in your umlaut config in local ./app/controllers/umlaut_controller.rb:
umlaut_config.configure do
#....
admin do
force_ssl false # no ssl even in production
auth do
username 'admin'
password 'some_password'
end
end
# ....
end
As an alternative to Umlaut configured admin username/password, you could protect at the apache level using any of apache's access control mechanisms, perhaps a local institutional single-sign on limited to certain accounts.
Once you've enabled admin functions (see above), a report is available of