diff options
| author | Joe Siltberg <git@joesiltberg.se> | 2020-04-06 08:52:48 +0200 |
|---|---|---|
| committer | Joe Siltberg <git@joesiltberg.se> | 2020-04-06 08:52:48 +0200 |
| commit | 0faec74a02c6ae436fdbfbe587e13b08befe9810 (patch) | |
| tree | 86dcd003fbfac219e9b07c9a38987acdbfe478c0 /docs | |
| parent | 9a355329fe7e3012e3ca50b96329b277aff412d6 (diff) | |
Removes documentation about restricting access to /admin
Fixes #2937
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/running/index.md | 18 |
1 files changed, 2 insertions, 16 deletions
diff --git a/docs/running/index.md b/docs/running/index.md index e552826dd..d618a241a 100644 --- a/docs/running/index.md +++ b/docs/running/index.md @@ -26,19 +26,5 @@ everything running smoothly. </p> By default the administration pages for FixMyStreet can be found on your installation at `/admin`. -When you first deploy your installation of FixMyStreet, this is just a public -directory. Obviously, for a -<a href="{{ "/glossary/#production" | relative_url }}" class="glossary__link">production</a> -server you should **restrict access to -authorised users only**. For example, if you're running the Apache webserver, -you can use `htaccess` to do this. - -<div class="attention-box warning"> - <p><strong>You <em>must</em> restrict access to admin</strong> - <br> - Never put your FixMyStreet site live until you have protected - your admin pages. - </p> -</div> - -If you can configure your webserver to only allow access to the admin URLs over https, then you should do that, and deny access any other way. It's also a good idea to IP-restrict access to admin URLs if you know where your authorised users will be accessing them from. +Users that have the right to access the administration pages should also +see an Admin-link in the navigation bar on the front page. |