Allow customers to download db snapshots
----------------------------------------
Key: MIFOSADMIN-183
URL: http://mifosforge.jira.com/browse/MIFOSADMIN-183
Project: mifos administration
Issue Type: Dev Task
Reporter: Sumit Shah
An abridged email thread describing story
- the new users on Apache will be created as part of the setup a new customer
- the cron-job for backup and cleaning up old backups also will be part of the
setup for a new customer
- an intelligent user (a.k.a. hacker) will not be able to access another MFI's
backup file - even by guessing another MFI's folder/file name and entering that
in the browser URL
My first impression of how this would be accomplished is:
* Apache2 secure website with logins per customer
* Cron jobs that run a mysqldump at intervals
* Cron jobs that delete old dumps so they don't get saved forever
This solves all the questions you ask below, since there are one or multiple
dumps per day and the users don't request them; there is a secure password
protected website that secures them; and since they are run by the cron
scheduler they can't conflict with each other.
I get about 4-5 requests from Light and Digamber for these every month.
Not a high priority task yet as it takes me only about 15 minutes to do
this.
The idea is that the MFI would initiate the process for requesting for a
backup of the database.
Once the backup file (perhaps a mysqldump file, gzipped and password
protected) is generated then provide a link to the user to download these
files.
I see a few of challenges:
- Do we need to take the database/Mifos application offline when providing
this backup?
- How to ensure that only authorized people initiate the backup and
download
the backup files
- How to restrict this from being invoked multiple times in parallel
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://mifosforge.jira.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
------------------------------------------------------------------------------
What happens now with your Lotus Notes apps - do you make another costly
upgrade, or settle for being marooned without product support? Time to move
off Lotus Notes and onto the cloud with Force.com, apps are easier to build,
use, and manage than apps on traditional platforms. Sign up for the Lotus
Notes Migration Kit to learn more. http://p.sf.net/sfu/salesforce-d2d
_______________________________________________
Mifos-issues mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mifos-issues
