Difficulté lors de la limitations des accès via manifest.toml

Bonjour tout le monde :cowboy_hat_face:
j’essaye de limiter l’accès à une page web de my_web_app grâce au fichier manifest.toml mais malheureusement je peux toujours avoir accès à la page Tools/index.php sans être connecté en dépit de cette nouvelle configuration :

[resources]
    [resources.system_user]

    [resources.install_dir]

    [resources.permissions]
    main.url = "/"

    tools.url = "/Tools/index.php"
    tools.show_tile = false
    tools.allowed = "admins"

J’ai également tenté /Tools sans préciser le index.php, j’ai essayé de redémarrer le serveur / et nginx mais rien n’y fait. :confused:

Merci d’avance.

:uk: Hello everyone
I’m trying to limit access to a web page in my_web_app using the manifest.toml file but unfortunately I can still access the Tools/index.php page without being connected despite this new configuration:

[resources]
    [resources.system_user]

    [resources.install_dir]

    [resources.permissions]
    main.url = "/"

    tools.url = "/Tools/index.php"
    tools.show_tile = false
    tools.allowed = "admins"

I also tried /Tools without specifying the index.php, I tried to restart the server / and nginx but nothing worked.

uuuugh i’m not sure you really are supposed to edit manifest.toml yourself except if you’re explicitly packaging/maintaining an application … i’m not sure it does you think it does …

if you want to change the permission access to a given app, you should go to the webadmin > User > Groups and permission > add/remove access in the groups

This will change the permissions for the whole webapp. He needs to restrict the access for one page. I think his best option is to edit the nginx config.

In that case i’d say the best bet is to add a custom permission block in /etc/ssowat/conf.json.persistent

1 Like