Geert ,

Thanks for your fast reply....I would like to create custom admin 
interface that will provide subset of Admin monitoring functionality....

Abhishek Srivastav
Tata Consultancy Services
Cell:- +91-9883389968
Mailto: abhishek5...@tcs.com
Website: http://www.tcs.com
____________________________________________
Experience certainty.   IT Services
                        Business Solutions
                        Outsourcing
____________________________________________



From:
Geert Josten <geert.jos...@daidalos.nl>
To:
General MarkLogic Developer Discussion <general@developer.marklogic.com>
Date:
09/08/2011 05:37 PM
Subject:
Re: [MarkLogic Dev General] Read only access to Admin interface.....
Sent by:
general-boun...@developer.marklogic.com



Hi Abhishek,
 
Most pages in the Admin interface are shielded with the sec:check-admin 
function, which only tolerates current users that have admin role. And 
users with admin role have always unlimited access to anything.
 
If you only need a small part of the Admin interface functionality, you 
are best of writing your own using the sec and admin API functions. Bit of 
a long shot, but you could also try to fit a proxy in between that passes 
through GET?s, but blocks POST?s. Not as nice, but perhaps quickest. Not 
sure it blocks all updates though, there could be updating GET?s in the 
Admin interface..
 
Kind regards,
Geert
 
Van: general-boun...@developer.marklogic.com [
mailto:general-boun...@developer.marklogic.com] Namens Abhishek53 S
Verzonden: donderdag 8 september 2011 13:57
Aan: General MarkLogic Developer Discussion
Onderwerp: [MarkLogic Dev General] Read only access to Admin 
interface.....
 

Hi Folks 

I am trying to have read only access to admin console (8001) of ML 
server...User with this role can logged in to Admin interface to monitor 
the activity but can not modify any other configurations... 

The following execute privileges are provided to the custom 
read-only-admin role 

admin-module-read 
admin-ui 
xdmp:license-accepted 
xdmp:license-key-valid 
xdmp:pre-release-expires 
xdmp:read-host-config-file 

Redirecting to security and configuration upgrade page If the user is 
logged in with custom read-only-admin credentials....Going through the 
administrator guide it seems to be impossible as it is mentioned that only 
user with "admin" role can do that... 


Is it not possible to provide read only  access to the Admin 
interface....If not so my next step is to built a custom interface and 
logged in with the user which have no admin-module-write privilege.. 

Sorry for the big mail....Any suggestion will be appreciated. 


Thanks & Regards
Abhishek Srivastav
Tata Consultancy Services
Cell:- +91-9883389968
Mailto: abhishek5...@tcs.com
Website: http://www.tcs.com
____________________________________________
Experience certainty.        IT Services
                       Business Solutions
                       Outsourcing
____________________________________________
=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain 
confidential or privileged information. If you are 
not the intended recipient, any dissemination, use, 
review, distribution, printing or copying of the 
information contained in this e-mail message 
and/or attachments to it are strictly prohibited. If 
you have received this communication in error, 
please notify us by reply e-mail or telephone and 
immediately and permanently delete the message 
and any attachments. Thank you
_______________________________________________
General mailing list
General@developer.marklogic.com
http://developer.marklogic.com/mailman/listinfo/general


_______________________________________________
General mailing list
General@developer.marklogic.com
http://developer.marklogic.com/mailman/listinfo/general

Reply via email to