Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>I don't have a world of Rails, or Heroku, knowledge, but my take on it would be that if your site already requires <em>authentication</em>, go ahead and add the <em>authorization</em> piece for your administrative user(s) that only allow them to access your admin page(s). Check out <a href="https://github.com/ryanb/cancan" rel="nofollow">CanCan</a> for authorization.</p> <p>If only your admin page(s) require administration, then you can probably get away with just using AuthLogic to make sure an identified user is accessing those admin page(s).</p> <ol> <li>I tend to think of SSL as a transport concern and that would make it unlikely that AuthLogic would <strong>require</strong> it. That being said, anytime your passing sensitive data around, passwords, then I would consider SSL a requirement. If the app is securing your grandmothers cookie recipe's, then you might forego the SSL implementation, except for the experience.</li> <li>I may be wrong on this, but SSL is for an entire site/domain. If your admin page(s) were hosted on a separate site/domain then that might work.</li> <li>AuthLogic + SSL should be secure enough - an admin user getting their password hacked (sticky note, email, etc) will compromise any security you've got in place. If by "destroyed", you mean sensitive customer data leaked, then liability insurance might mitigate that. If you mean that your site will be down, then put in distaster recovery processes to bring your site back up/online (ASAP) and maybe invalidate existing administration credentials?</li> <li>Whoosh (completely over my head)</li> <li>Whoosh (completely over my head)</li> </ol> <p>HTH,</p> <p>Z</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload