[DAS] Re: DAS security

[Lincoln Stein]

I guess this requires a bit of tinkering with the ensembl contigview code.  
For what it's worth, the gbrowse genome browser allows you to restrict which 
tracks are displayed by either IP address or username/password.

Lincoln

On Wednesday 24 September 2003 12:20 pm, James Smith wrote:
> On Wed, 24 Sep 2003, Lincoln Stein wrote:
> > Hi,
> >
> > Just set the DAS server's authentication to refuse all requests except
> > those from the bona-fide Ensembl IP address.  It works in LDAS using
> > Apache's standard authentication/authorization system, as well as Dazzle
> > per Thomas' note below.
>
> Lincoln,
>
> The problem is that the IP restriction required in on the web-browser, NOT
> on the EnsEMBL website...
>
>   DAS Server ---- EnsEMBL Website ---- Web browser
>
> So somehow the website has to pass the browsers IP through in the request,
> and for DAS to restrict the information based on this rather than on the
> IP of the EnsEMBL website... this is tricky to achieve with much security.
>
> James

-- 
========================================================================
Lincoln D. Stein                           Cold Spring Harbor Laboratory
lstein at cshl.org			                  Cold Spring Harbor, NY
========================================================================