Skip to main content
Sebastian_Rockw
Sebastian_Rockw
Level 2
Mar 25, 2021 3:21 PM UTC
Solved

Restrict access to /nl/jsp/monitor.jsp

Hi all,

on my ACC instance, which is hosted on prem, I can access /nl/jsp/monitor.jsp, log in with an operator and then see the different monitoring metrics.

However, it seems like I can login with any operator, no matter the operator groups he is assigned to.
Is there any way to restrict access to /nl/jsp/monitor.jsp to operators having admin operator group only?

 

Thanks and BR

Sebastian

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Jonathon_wodnicki
Jonathon_wodnickiAccepted solution
Community Advisor
Apr 1, 2021 7:34 PM UTC

Hi,

 

Security is performed here by hiding the link to the page from non-admin users in the nav bar.

The jsp page can be altered (overwritten on upgrade) to add proper authorization check tho, put this at the top somewhere:

if (!ctx.hasRight('admin')) { response.sendError(HttpServletResponse.SC_FORBIDDEN); return; }

 

 

Thanks,

-Jon

View in thread

2 replies

Jonathon_wodnicki
Community Advisor
Jonathon_wodnickiCommunity AdvisorAccepted solution
Community Advisor
Apr 1, 2021 7:34 PM UTC

Hi,

 

Security is performed here by hiding the link to the page from non-admin users in the nav bar.

The jsp page can be altered (overwritten on upgrade) to add proper authorization check tho, put this at the top somewhere:

if (!ctx.hasRight('admin')) { response.sendError(HttpServletResponse.SC_FORBIDDEN); return; }

 

 

Thanks,

-Jon

Translate
    Sebastian_Rockw
    Sebastian_RockwAuthor
    Level 2
    Apr 6, 2021 8:08 AM UTC
    Thanks a lot, Jon! BR Sebastian
    Translate
    Terms & ConditionsAccessibility statement

    Loading footer...