comparison Sphinx/source/faq/authentication.rst @ 650:9e7c58e1725b

authentication.rst
author Sebastien Jodogne <s.jodogne@gmail.com>
date Tue, 27 Apr 2021 06:38:58 +0200
parents c310a795c133
children
comparison
equal deleted inserted replaced
649:22e3868d2eb1 650:9e7c58e1725b
12 * ``RemoteAccessAllowed`` to ``true``. 12 * ``RemoteAccessAllowed`` to ``true``.
13 * ``AuthenticationEnabled`` to ``true``. 13 * ``AuthenticationEnabled`` to ``true``.
14 * In ``RegisteredUsers``, assign a username and a password to all your 14 * In ``RegisteredUsers``, assign a username and a password to all your
15 users. 15 users.
16 16
17 **Important:** Make sure to read the FAQ about :ref:`how to secure
18 Orthanc <security>`.
19
17 Once a user has logged in, she will have full access, in read-write 20 Once a user has logged in, she will have full access, in read-write
18 mode, to all the features offered by the REST API of Orthanc. This 21 mode, to all the features offered by the REST API of Orthanc. This
19 built-in mechanism might be of limited usefulness in enterprise 22 built-in mechanism might be of limited usefulness in enterprise
20 scenarios, for which you would need features such as: 23 scenarios, for which you would need features such as:
21 24
33 <lua-filter-rest>`. This is the most simple solution, and would 36 <lua-filter-rest>`. This is the most simple solution, and would
34 notably allow you to implement read-only access or, more generally, 37 notably allow you to implement read-only access or, more generally,
35 `access control lists 38 `access control lists
36 <https://en.wikipedia.org/wiki/Access_control_list>`__. 39 <https://en.wikipedia.org/wiki/Access_control_list>`__.
37 * Develop a :ref:`C/C++ plugin <creating-plugins>` that uses the 40 * Develop a :ref:`C/C++ plugin <creating-plugins>` that uses the
38 ``OrthancPluginRegisterIncomingHttpRequestFilter()``. This solution 41 ``OrthancPluginRegisterIncomingHttpRequestFilter()``, or a
39 is potentially useful if you wish to integrate with an LDAP server. 42 :ref:`Python plugin <python_authorization>` that uses
43 ``orthanc.RegisterIncomingHttpRequestFilter()``. This solution is
44 potentially useful if you wish to integrate with an LDAP server.
40 * Use Orthanc as a reverse proxy (e.g. behind :ref:`nginx <nginx>`, 45 * Use Orthanc as a reverse proxy (e.g. behind :ref:`nginx <nginx>`,
41 :ref:`Apache <apache>`, or :ref:`Microsoft IIS <iis>`), and use the 46 :ref:`Apache <apache>`, or :ref:`Microsoft IIS <iis>`), and use the
42 authentication mechanisms of the main Web server. 47 authentication mechanisms of the main Web server.
43 * Create a :ref:`new Web user interface <improving-interface>` on the 48 * Create a :ref:`new Web user interface <improving-interface>` on the
44 top of the REST API of Orthanc, using your favorite framework 49 top of the REST API of Orthanc, using your favorite framework