Show Posts
1
Security / security for Applications
« on: July 07, 2009, 09:49:49 pm »
How-to apply opengoo security access in applications/plugins
I've installed dokuwiki in a new tab using http://forums.opengoo.org/index.php?topic=476.0 and many other topics. I've place dokuwiki source code in application/views/dokuwiki folder I have created for.
It's work fine at all, but :
- Is it possible to reuse the opengoo auth mechanism to identify users in dokuwiki
- Is it possible to go to a specific wiki page depends on workspace currently used
- It's actually possible to access directly to dokuwiki without opengoo login by typing the full URI like http://mydomain.com/opengoo/application/views/dokuwiki : it's a security issue for me (I know it's possible to activate authentication in dokuwiki)
- Is it possible to redirect to opengoo login page if the user isn't authenticate by opengoo
I'm not a developper and i search some help on this forum. I think it's possible if we hack partially dokuwiki code but i don't know how.
If someone can resolve this, I am ok to rewrite/complete the helloword application documentation (in poor english
and french), I think it will be possible to add opengoo authentication mechanism for any application added in opengoo.
I've installed dokuwiki in a new tab using http://forums.opengoo.org/index.php?topic=476.0 and many other topics. I've place dokuwiki source code in application/views/dokuwiki folder I have created for.
It's work fine at all, but :
- Is it possible to reuse the opengoo auth mechanism to identify users in dokuwiki
- Is it possible to go to a specific wiki page depends on workspace currently used
- It's actually possible to access directly to dokuwiki without opengoo login by typing the full URI like http://mydomain.com/opengoo/application/views/dokuwiki : it's a security issue for me (I know it's possible to activate authentication in dokuwiki)
- Is it possible to redirect to opengoo login page if the user isn't authenticate by opengoo
I'm not a developper and i search some help on this forum. I think it's possible if we hack partially dokuwiki code but i don't know how.
If someone can resolve this, I am ok to rewrite/complete the helloword application documentation (in poor english
and french), I think it will be possible to add opengoo authentication mechanism for any application added in opengoo.