diff options
| author | Matthew Somerville <matthew@mysociety.org> | 2020-04-06 15:08:55 +0100 |
|---|---|---|
| committer | Matthew Somerville <matthew@mysociety.org> | 2020-04-06 15:08:55 +0100 |
| commit | 836201a3e6b4a54256ac63716eecad982b9abd65 (patch) | |
| tree | 8643bfff0ce8f021804cfc5e15139204b888be74 /docs/running | |
| parent | 12b045dffaa981709739d5bdd04c8d1294664934 (diff) | |
| parent | 0faec74a02c6ae436fdbfbe587e13b08befe9810 (diff) | |
Merge branch 'admin-access-doc-2937' of git://github.com/Sambruk/fixmystreet
Diffstat (limited to 'docs/running')
| -rw-r--r-- | docs/running/index.md | 18 |
1 files changed, 2 insertions, 16 deletions
diff --git a/docs/running/index.md b/docs/running/index.md index e552826dd..d618a241a 100644 --- a/docs/running/index.md +++ b/docs/running/index.md @@ -26,19 +26,5 @@ everything running smoothly. </p> By default the administration pages for FixMyStreet can be found on your installation at `/admin`. -When you first deploy your installation of FixMyStreet, this is just a public -directory. Obviously, for a -<a href="{{ "/glossary/#production" | relative_url }}" class="glossary__link">production</a> -server you should **restrict access to -authorised users only**. For example, if you're running the Apache webserver, -you can use `htaccess` to do this. - -<div class="attention-box warning"> - <p><strong>You <em>must</em> restrict access to admin</strong> - <br> - Never put your FixMyStreet site live until you have protected - your admin pages. - </p> -</div> - -If you can configure your webserver to only allow access to the admin URLs over https, then you should do that, and deny access any other way. It's also a good idea to IP-restrict access to admin URLs if you know where your authorised users will be accessing them from. +Users that have the right to access the administration pages should also +see an Admin-link in the navigation bar on the front page. |