aboutsummaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorBadlop <badlop@process-one.net>2010-04-27 23:16:48 +0200
committerBadlop <badlop@process-one.net>2010-04-27 23:27:44 +0200
commit705c5b4c1cfe5b1b8a1acf0d5550c5badfa8c3e2 (patch)
treef0ef33511ac681508691471ea78a10b87dedee44 /doc
parentDon't store blocked messages in offline queue (thanks to Brian Acton)(EJAB-1224) (diff)
New Access rule webadmin_view for read-only (thanks to Oleg Palij)(EJAB-213)
Diffstat (limited to 'doc')
-rw-r--r--doc/guide.html7
-rw-r--r--doc/guide.tex9
2 files changed, 14 insertions, 2 deletions
diff --git a/doc/guide.html b/doc/guide.html
index fe821c9b6..467b2cfcd 100644
--- a/doc/guide.html
+++ b/doc/guide.html
@@ -3681,7 +3681,8 @@ you will see a page similar to figure&#XA0;<A HREF="#fig:webadmmain">4.1</A>.</P
<DIV CLASS="center"><HR WIDTH="80%" SIZE=2></DIV></DIV></BLOCKQUOTE><P>
Here you can edit access restrictions, manage users, create backups,
manage the database, enable/disable ports listened for, view server
-statistics,&#X2026;</P><P>Examples:
+statistics,&#X2026;</P><P>The access rule <TT>configure</TT> determines what accounts can access the Web Admin and modify it.
+The access rule <TT>webadmin_view</TT> is to grant only view access: those accounts can browse the Web Admin with read-only access.</P><P>Example configurations:
</P><UL CLASS="itemize"><LI CLASS="li-itemize">
You can serve the Web Admin on the same port as the
HTTP Polling interface. In this example
@@ -3695,9 +3696,13 @@ username &#X2018;<TT>admin@example.net</TT>&#X2019; to administer all virtual ho
URL). If you log in with &#X2018;<TT>admin@example.com</TT>&#X2019; on<BR>
<CODE>http://example.org:5280/admin/server/example.com/</CODE> you can only
administer the virtual host <TT>example.com</TT>.
+The account &#X2018;<TT>reviewer@example.com</TT>&#X2019; can browse that vhost in read-only mode.
<PRE CLASS="verbatim">{acl, admins, {user, "admin", "example.net"}}.
{host_config, "example.com", [{acl, admins, {user, "admin", "example.com"}}]}.
+{host_config, "example.com", [{acl, viewers, {user, "reviewer", "example.com"}}]}.
+
{access, configure, [{allow, admins}]}.
+{access, webadmin_view, [{allow, viewers}]}.
{hosts, ["example.org"]}.
diff --git a/doc/guide.tex b/doc/guide.tex
index 455f6e912..47d93968d 100644
--- a/doc/guide.tex
+++ b/doc/guide.tex
@@ -4675,7 +4675,10 @@ Here you can edit access restrictions, manage users, create backups,
manage the database, enable/disable ports listened for, view server
statistics,\ldots
-Examples:
+The access rule \term{configure} determines what accounts can access the Web Admin and modify it.
+The access rule \term{webadmin\_view} is to grant only view access: those accounts can browse the Web Admin with read-only access.
+
+Example configurations:
\begin{itemize}
\item You can serve the Web Admin on the same port as the
\ind{protocols!XEP-0025: HTTP Polling}HTTP Polling interface. In this example
@@ -4689,10 +4692,14 @@ Examples:
URL). If you log in with `\jid{admin@example.com}' on \\
\verb|http://example.org:5280/admin/server/example.com/| you can only
administer the virtual host \jid{example.com}.
+ The account `\jid{reviewer@example.com}' can browse that vhost in read-only mode.
\begin{verbatim}
{acl, admins, {user, "admin", "example.net"}}.
{host_config, "example.com", [{acl, admins, {user, "admin", "example.com"}}]}.
+{host_config, "example.com", [{acl, viewers, {user, "reviewer", "example.com"}}]}.
+
{access, configure, [{allow, admins}]}.
+{access, webadmin_view, [{allow, viewers}]}.
{hosts, ["example.org"]}.