Index: [Article Count Order] [Thread]

Date:  Tue, 16 Nov 2004 17:02:24 +0900
From:  Shugo Maeda <shugo@...>
Subject:  Re: "admin only mode" (disallowing normal users from using mod_ruby)
To:  modruby@... (modruby ML)
Message-Id:  <4199B410.10801@...>
In-Reply-To:  <4194D2D8.7070206@...>
References:  <4194D2D8.7070206@...>
X-Mail-Count: 01349

Hi,

Sorry to be late.
The disk of modruby.net was crached:-(
# But the subversion repository is alive:-)

David Garamond wrote:
> The problem is, for security reasons, we do not want to allow access to 
> mod_ruby from .htaccess, as the webserver is shared and normal hosting 
> users are allowed to use .htaccess.
> 
> I remember a while back suggesting something like "PerlMode normal" / 
> "PerlMode adminonly" directive to the mod_perl mailing list, where in 
> the "PerlMode adminonly" mode we deny all Perl* directives in .htaccess. 
> Unfortunately, I didn't get any reply. But I'm sure there are many 
> server admins like myself who would like the ability to write Apache 
> modules in Ruby/Perl but without having to give access to Ruby/Perl 
> interpreter to normal users.
> 
> The patch to do the above is simple, but I ended up doing the simpler 
> thing (modifying the directives definition in mod_perl.c from OR_ALL to 
> RSRC_CONF).
> 
> Now what about mod_ruby? Is there any interest to do like the above? I 
> believe this will increase the usefulness of mod_ruby, especially for 
> people in my situation (shared hosting).

The concept is good, but the name RubyMode sounds too generic for me.
Can you suggest other names?

Shugo