Mercurial > gemma
comparison example_conf.toml @ 478:3af7ca761f6a
Purge password reset role
The risk of SQL-injections and thus privilege escalation
via the metamorphic user was estimated not high enough to
justify the extra role. Thus, bring database back in line
with rev. ffdb507d5b42 and re-enable password reset.
author | Tom Gottfried <tom@intevation.de> |
---|---|
date | Thu, 23 Aug 2018 16:41:44 +0200 |
parents | 5611cf72cc92 |
children |
comparison
equal
deleted
inserted
replaced
477:00b52d653039 | 478:3af7ca761f6a |
---|---|
1 dbhost = "gemma_db" | 1 dbhost = "gemma_db" |
2 service-user = "gemma_service" | |
3 service-password = "pw2Reset4" | |
4 host = "0.0.0.0" | 2 host = "0.0.0.0" |
5 sessions = "/tmp/gemma_session.data" | 3 sessions = "/tmp/gemma_session.data" |
6 web = "./web" | 4 web = "./web" |
7 geoserver-url = "http://gemma_geoserver:8080/geoserver" | 5 geoserver-url = "http://gemma_geoserver:8080/geoserver" |
8 metamorph-db-user = "meta_login" | 6 metamorph-db-user = "meta_login" |