customBuild via web interface - FLUID-2937

Laurel A. Williams laurel.williams at utoronto.ca
Wed Aug 19 19:08:17 UTC 2009


Hi all,

I have been working on the challenge of executing the customBuild ant 
script via a web interface. There have been some barriers due to file 
permissions and maven settings defaults.

I have made considerable progress on modifying the build.xml to run a 
custom script calling Maven, and have posted some thoughts, a script 
file and a new patch at http://issues.fluidproject.org/browse/FLUID-2937

I have recorded some of my concerns in the JIRA. In particular, I had to 
open up execute permissions to all users on the custom script, and write 
permissions to all users in the .m2 directory and the infusion 
directory. I'm pretty sure I'm opening up security holes that we would 
prefer not to have...and would appreciate some advice on ways to lock 
things down better.

In addition, I am not sure what concerns we may have about multiple 
users attempting to access ant, maven and the script at the same time. 
This is more of a unix thing that I don't know that much about yet - can 
multiple users execute the same commands via the web page safely?? I'm 
sure someone on this list knows but I'm not clear on it.

Would appreciate some feedback from Colin and Jamon and anyone else who 
has thoughts.

Laurel




-------------- next part --------------
A non-text attachment was scrubbed...
Name: laurel_williams.vcf
Type: text/x-vcard
Size: 269 bytes
Desc: not available
URL: <https://lists.idrc.ocad.ca/pipermail/fluid-work/attachments/20090819/5023e5d0/attachment.vcf>


More information about the fluid-work mailing list