Skip to content
This repository has been archived by the owner on Oct 31, 2024. It is now read-only.

Allow dhis2-admins to access backup files without using sudu #1

Open
olatitle opened this issue Oct 23, 2014 · 1 comment
Open

Allow dhis2-admins to access backup files without using sudu #1

olatitle opened this issue Oct 23, 2014 · 1 comment

Comments

@olatitle
Copy link

Use case 1:
A dhis2-admin user wants to download the backup files located in /var/lib/dhis2/dhis/backups, or generate and download an ad-hoc db backup generated by the dhis () user.

Problem. Currently the dhis2-admins don't have access to files in the backups/ folder, so the only way right now is to use sudo. And ad-hoc backup can be taken using "sudo -u dhis pg_dump XXX", but this file must be written to a folder where the dhis user has access (not possible to write the backup to /home/), and the dhis2-admin user will not have access to that location.

simjes added a commit that referenced this issue Sep 29, 2016
@bobjolliffe
Copy link
Contributor

Need to change the way that automatic backups are done. It is not right that they should run as the dhis2 application user. If the user is compromised, so is access to the backups.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants