View Issue Details

IDProjectCategoryView StatusLast Update
0002837Composrsetupwizardpublic2016-10-04 21:05
ReporterChris GrahamAssigned ToChris Graham 
SeverityFeature-request 
Status resolvedResolutionfixed 
Product Version 
Fixed in Version 
Summary0002837: Security level option
DescriptionThere's a trade-off between convenience and security. This trade-off comes up implicitly in various config options and usergroup options.

Have a simple dropdown in the Setup Wizard to mass-set these. 3 options:
 - Low security (convenient)
 - Moderate security
 - Ultra high security (inconvenient)

Explain in the option description that low security isn't inherently insecure, but does mean that if particular things are compromised then there aren't so many additional layers in place for safeguards.
TagsType: Security
Time estimation (hours)3
Sponsorship open

Activities

Chris Graham

2016-09-20 18:33

administrator   ~0004344

Generally look at advice in our tut_web_hosting and tut_security tutorials and squeeze as much as possible into this.

We can also look at giving warnings at installation if a webhost isn't meeting our security advice.

Issue History

Date Modified Username Field Change
2016-09-20 18:31 Chris Graham New Issue
2016-09-20 18:31 Chris Graham Tag Attached: Type: Security
2016-09-20 18:33 Chris Graham Note Added: 0004344
2016-10-04 21:05 Chris Graham Status non-assigned => resolved
2016-10-04 21:05 Chris Graham Resolution open => fixed
2016-10-04 21:05 Chris Graham Assigned To => Chris Graham