On Sunday, June 7, 2015 at 9:13:22 PM UTC-7, jjs0sbw wrote:
>
> I have followed the instructions in the book that detail how to distribute 
> applications as binaries.
> (
> http://web2py.com/books/default/chapter/29/14#How-to-distribute-your-applications-as-binaries
> )
>
> On my mac when I open the app, I am presented with the opportunity to set 
> an admin password and start the server.
>
> Is there any way to by pass these steps and just have the application open 
> up in the web browser?
>
> I do not want the users to be able to access the admin interface.
>

Perhaps you can provide a password file, and start web2py with *-a 
"<recycle>"*.

But if the person installing the app has permission to install, do they 
also have permission to access the installed files directly?  That would 
allow access to the data and the code (or at least the bytecode) even 
though you don't have an addmin app.

I'm not sure what you're trying to achieve with your restrictions.  If the 
person who installs it is to be restricted in what they can do besides 
install, that could be tough unless you can do a chmod/chown step during 
installation (and if they have sudo rights, then that's not enough, either).

If you want people accessing the site the app provides not to be able 
access the admin app, then the default web2py configuration was probably 
enough, as you have to do explicit steps to enable access to the admin apps 

I'm not familiar with Mac/OS-X specific access control, and it might differ 
considerably from linuxes and other *nixes, but if you want your app to be 
a black box even to the person installing it, you may have to use a more 
elaborate installation method.

/dps

-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to