Torneo/Protezione Ianseo

    From Ianseo
    < Competition
    Revision as of 08:02, 21 April 2025 by DellaRossa (talk | contribs) (Created page with "Ianseo non offre alcuna protezione contro un attacco al server, soprattutto perché l'utente del server web deve avere i permessi di scrittura per eseguire gli aggiornamenti. Non è quindi saggio configurare un ianseo su un server pubblico se non si hanno competenze di amministrazione di sistema. {{Note|type=error|text=Ianseo può essere eseguito su un server web pubblico, ma questo significa che chiunque abbia accesso al server può manomettere i dati o addirittura rimu...")


    Other languages:

    Ianseo non offre alcuna protezione contro un attacco al server, soprattutto perché l'utente del server web deve avere i permessi di scrittura per eseguire gli aggiornamenti. Non è quindi saggio configurare un ianseo su un server pubblico se non si hanno competenze di amministrazione di sistema.

    Ianseo può essere eseguito su un server web pubblico, ma questo significa che chiunque abbia accesso al server può manomettere i dati o addirittura rimuovere la competizione

    Nontheless, ianseo offers two "anti-tampering" methods.

    Block editing

    Competition Block Editing

    This is a very basic method: clicking on the links, sections of ianseo will be visible but cannot be modified unless the lock is released.

    Network Access Policies

    Network Access Policies

    This is the most complex feature in ianseo: be ready to shut yourself out of the competition!

    Of course ianseo on localhost is never blocked (it is a nonsense to shut out a user running ianseo on his own computer and accessing it locally).

    Best results are obtained with the critical computers being with a fix IP (DHCP reservation on the router would be persistent through reboots or multiple competitions): results management, accreditation point, speakers, judges, etc.

    • Enable/Disable Access Policies: once enabled, if your IP is not on the list you will be cut out of the connection and not able to manage anything anymore! Be sure to set your own IP in the list of authorized computers and click on the green checkbox on the left to set that IP to "can do everything".
    • Automatic Record IP Addresses: this feature will automatically add in the list all the devices that connect to ianseo, with no permissions. This will speed up the process in retrieving and granting permissions to authorized people.
    • Network Access Policies: exports/imports network policies defined

    Green checkbox means write access, blue lens means read access, red no entry means no permissions for the specific section od Ianseo.

    At the bottom one or more Regular Expression syntax can be used to grand all matching IPs the same permissions.

    Remember that in case you did shut yourself out of the competition, a reset of the situation can be performed opening a shell on the server and asking the page located on http://localhost/?ACLReset=[Competition Code]