mirror of
https://github.com/ArchiveBox/ArchiveBox.git
synced 2026-04-25 17:16:00 +03:00
[GH-ISSUE #472] Question: can anon access be disabled? #310
Labels
No labels
expected: maybe someday
expected: next release
expected: release after next
expected: unlikely unless contributed
good first ticket
help wanted
pull-request
scope: all users
scope: windows users
size: easy
size: hard
size: medium
size: medium
status: backlog
status: blocked
status: done
status: idea-phase
status: needs followup
status: wip
status: wontfix
touches: API/CLI/Spec
touches: configuration
touches: data/schema/architecture
touches: dependencies/packaging
touches: docs
touches: js
touches: views/replayers/html/css
why: correctness
why: functionality
why: performance
why: security
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/ArchiveBox#310
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @zblesk on GitHub (Sep 9, 2020).
Original GitHub issue: https://github.com/ArchiveBox/ArchiveBox/issues/472
I just found ArchiveBox today and will gladly scrap my homebrew archival solution. Great work!
I definitely don't want to have my archive exposed to the world, though. I need the user to be logged in befoe accessing anything. Can this be turned on? I haven't found anything like this so far.
Thanks again!
@apkallum commented on GitHub (Sep 10, 2020):
There are a few relevant options depending on how you want to configure it. For now, there is
PUBLIC_INDEX&PUBLIC_SNAPSHOTS, both of which you can set toFalse. In the next release (0.5) which should be this week, there will be an option to also enable or disable a the add view for non-logged in users.@zblesk commented on GitHub (Sep 10, 2020):
Thank you! Seems to work!
I can't find any docs for that. WHat happens if I disable Index but enable Snapshots? Will I be able to hotlink articles, but only logged in users will be able to search/see the list?
Is that a supported use-case?
@pirate commented on GitHub (Sep 13, 2020):
Yes, that is a supported use case, and it should work exactly as you described.
PUBLIC_SNAPSHOTS= anon users can view hotlinked archived sitesPUBLIC_INDEX= anon users can view the full archive indexIt's not in the docs yet because these config values are not stable, and will change quite soon when we refactor the permissions model.
The future design will likely be something like
anon: rwx, user: rwx, admin: rwxor follow the Django standard permissions model.