[
http://mifosforge.jira.com/browse/MIFOSADMIN-183?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ryan Whitney updated MIFOSADMIN-183:
------------------------------------
Fix Version/s: Cloud Release A - Unscheduled
> Allow customers to download db snapshots
> ----------------------------------------
>
> Key: MIFOSADMIN-183
> URL: http://mifosforge.jira.com/browse/MIFOSADMIN-183
> Project: mifos administration
> Issue Type: Dev Task
> Components: Cloud Instances, Infrastructure
> Reporter: Sumit Shah
> Fix For: Cloud Release A, Cloud Release A - Unscheduled
>
>
> An abridged email thread describing story
> - the new users on Apache will be created as part of the setup a new customer
> - the cron-job for backup and cleaning up old backups also will be part of
> the
> setup for a new customer
> - an intelligent user (a.k.a. hacker) will not be able to access another
> MFI's
> backup file - even by guessing another MFI's folder/file name and entering
> that
> in the browser URL
> My first impression of how this would be accomplished is:
> * Apache2 secure website with logins per customer
> * Cron jobs that run a mysqldump at intervals
> * Cron jobs that delete old dumps so they don't get saved forever
> This solves all the questions you ask below, since there are one or multiple
> dumps per day and the users don't request them; there is a secure password
> protected website that secures them; and since they are run by the cron
> scheduler they can't conflict with each other.
> I get about 4-5 requests from Light and Digamber for these every month.
> Not a high priority task yet as it takes me only about 15 minutes to do
> this.
>
> The idea is that the MFI would initiate the process for requesting for a
> backup of the database.
> Once the backup file (perhaps a mysqldump file, gzipped and password
> protected) is generated then provide a link to the user to download these
> files.
> I see a few of challenges:
> - Do we need to take the database/Mifos application offline when
> providing
> this backup?
> - How to ensure that only authorized people initiate the backup and
> download
> the backup files
> - How to restrict this from being invoked multiple times in parallel
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://mifosforge.jira.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d
_______________________________________________
Mifos-issues mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mifos-issues
