[
http://mifosforge.jira.com/browse/MIFOSADMIN-183?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ryan Whitney updated MIFOSADMIN-183:
------------------------------------
Priority: Major (was: Minor)
Binny has asked to raise the priority of this issue.
> Allow customers to download db snapshots
> ----------------------------------------
>
> Key: MIFOSADMIN-183
> URL: http://mifosforge.jira.com/browse/MIFOSADMIN-183
> Project: mifos administration
> Issue Type: Dev Task
> Components: Cloud Instances, Infrastructure
> Reporter: Sumit Shah
> Priority: Major
> Fix For: Cloud Release A, Cloud Release A - Iteration 4
>
> Original Estimate: 2 days
> Remaining Estimate: 2 days
>
> An abridged email thread describing story
> - the new users on Apache will be created as part of the setup a new customer
> - the cron-job for backup and cleaning up old backups also will be part of
> the
> setup for a new customer
> - an intelligent user (a.k.a. hacker) will not be able to access another
> MFI's
> backup file - even by guessing another MFI's folder/file name and entering
> that
> in the browser URL
> My first impression of how this would be accomplished is:
> * Apache2 secure website with logins per customer
> * Cron jobs that run a mysqldump at intervals
> * Cron jobs that delete old dumps so they don't get saved forever
> This solves all the questions you ask below, since there are one or multiple
> dumps per day and the users don't request them; there is a secure password
> protected website that secures them; and since they are run by the cron
> scheduler they can't conflict with each other.
> I get about 4-5 requests from Light and Digamber for these every month.
> Not a high priority task yet as it takes me only about 15 minutes to do
> this.
>
> The idea is that the MFI would initiate the process for requesting for a
> backup of the database.
> Once the backup file (perhaps a mysqldump file, gzipped and password
> protected) is generated then provide a link to the user to download these
> files.
> I see a few of challenges:
> - Do we need to take the database/Mifos application offline when
> providing
> this backup?
> - How to ensure that only authorized people initiate the backup and
> download
> the backup files
> - How to restrict this from being invoked multiple times in parallel
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://mifosforge.jira.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand
malware threats, the impact they can have on your business, and how you
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Mifos-issues mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mifos-issues
