#2836 - 2-factor authentication for maintenance scripts
-
By Chris Graham
- Added
- 4 views
| Identifier | #2836 |
|---|---|
| Issue type | Feature request or suggestion |
| Title | 2-factor authentication for maintenance scripts |
| Status | Completed |
| Tags |
Type: Security (custom) |
| Handling member | Chris Graham |
| Addon | core |
| Description | If:
a) 2-factor authentication (IP verify by email) has been turned on for any administrator group b) a new config option called something like "Auto-maintained 2-factor authentication for maintenance scripts" is enabled c) .htaccess is writable (If 'c' is not true then the 'b' option doesn't appear in the UI) Then whenever an IP verify is done by an administrator the .htaccess is updated to only allow access by that administrator, and other administor-verified-IPs to the maintenance scripts. The tut_security tutorial would need updating to reference this option, as currently it just shows manual code to add. |
| Steps to reproduce | |
| Funded? | No |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".
Comments