topic Re: How to allow/deny access to alfresco sites for different IPs? in Alfresco Forum

How to allow/deny access to alfresco sites for different IPs?

leblexx — Wed, 19 Apr 2017 14:36:31 GMT

Hi all,I want to prevent access to the sites from different IP addresses or grant access for several addresses.Please, give me an advice about best way to implement such feature. Many thanks.

Re: How to allow/deny access to alfresco sites for different IPs?

mehe — Wed, 19 Apr 2017 15:28:44 GMT

Do you want a global grant/denial of IPs for the whole alfresco site (could be done with a tomcat remote address valve Apache Tomcat 7 Configuration Reference (7.0.77) - The Valve Component )

or an IP based access control for each alfresco share site? (could be done with apache as reverse proxy, because the site name is a part of the url)

But maybe a more sophisticated Alfresco Admin knows some internal mechanism - I can't see one...

Re: How to allow/deny access to alfresco sites for different IPs?

leblexx — Thu, 20 Apr 2017 07:10:14 GMT

Thanks for your answer, Martin.

I already have IP restrictions for user for whole alfresco site.

Now I want an IP based access for share sites, actually for nodes in that site.

Re: How to allow/deny access to alfresco sites for different IPs?

mehe — Thu, 20 Apr 2017 09:39:37 GMT

I don't think that I like the concept , but that's up to you.

The nodeid is also part of the url if you access a node, so you can add an remote address or ip filter

Apache Tomcat 7 Configuration Reference (7.0.77) - Container Provided Filters

and change the url pattern accordingly (or use a reverse proxy and filter with that...)

But maybe you could describe what you want to achieve - isn't a group or user based restriction a better solution?