Re: Uploaded File Security

2010-05-20 Thread SQ9MEV
SQ9MEV pisze: > Lee Hinde pisze: >> What's best practice here? > Yet another way using nginx as a webserver: > http://wiki.nginx.org/NginxHttpAccessKeyModule And another one: http://wiki.nginx.org/NginxHttpSecureDownload -- Bart -- You received this message because you are subscribed to the Goog

Re: Uploaded File Security

2010-05-20 Thread SQ9MEV
Lee Hinde pisze: > What's best practice here? Yet another way using nginx as a webserver: http://wiki.nginx.org/NginxHttpAccessKeyModule -- Bart -- You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-us...@

Re: Uploaded File Security

2010-05-20 Thread Torsten Bronger
Hallöchen! Tomasz Zieliński writes: > On 20 Maj, 04:19, Mike Dewhirst wrote: > >> If it has to be secure rather than just wishful thinking the >> webserver must demand credentials. If you are using Apache, that >> means .htaccess files which point to a list of credentials for >> each group. > >

Re: Uploaded File Security

2010-05-20 Thread Tomasz Zieliński
On 20 Maj, 04:19, Mike Dewhirst wrote: > > If it has to be secure rather than just wishful thinking the webserver > must demand credentials. If you are using Apache, that means .htaccess > files which point to a list of credentials for each group. > What is the difference between long, random f

Re: Uploaded File Security

2010-05-19 Thread Torsten Bronger
Hallöchen! Dj Gilcrease writes: > On Thu, May 20, 2010 at 12:38 AM, Lee Hinde wrote: > >> This is going to be a hosted solution and if I add LDAP >> maintenance to the new things they have to do, I think they'll go >> back to shuffling Excel files back and forth via email. One >> Apache log-in

Re: Uploaded File Security

2010-05-19 Thread Dj Gilcrease
On Thu, May 20, 2010 at 12:38 AM, Lee Hinde wrote: > This is going to be a hosted solution and if I add LDAP maintenance to the > new things they have to do, I think they'll go back to shuffling Excel files > back and forth via email. > One Apache log-in and then one Django log-in? Blech. > Let's

Re: Uploaded File Security

2010-05-19 Thread Lee Hinde
On Wed, May 19, 2010 at 7:19 PM, Mike Dewhirst wrote: > On 20/05/2010 11:00am, Lee Hinde wrote: > >> I'm working on an intranet app for a client that will have file uploads. >> I'm early in the process, but have the uploading working just fine via >> admin. >> >> Once we get to deployment, I'm unc

Re: Uploaded File Security

2010-05-19 Thread Mike Dewhirst
On 20/05/2010 11:00am, Lee Hinde wrote: I'm working on an intranet app for a client that will have file uploads. I'm early in the process, but have the uploading working just fine via admin. Once we get to deployment, I'm unclear on how to coordinate the security that django will know about (gro

Uploaded File Security

2010-05-19 Thread Lee Hinde
I'm working on an intranet app for a client that will have file uploads. I'm early in the process, but have the uploading working just fine via admin. Once we get to deployment, I'm unclear on how to coordinate the security that django will know about (group X has access to X's files, but not grou