Forums / Install & configuration / Restrict the Access to the Admin Interface

"Please Note:
  • At the specific request of Ibexa we are changing this projects name to "Exponential" or "Exponential (CMS)" effective as of August, 11th 2025.
  • This project is not associated with the original eZ Publish software or its original developer, eZ Systems or Ibexa".

Restrict the Access to the Admin Interface

Author Message

Günther Lackner

Thursday 20 October 2005 6:32:40 am

Hi!

I need to restrict the access to the back end. Is there a possibility to only allow an IP address range? Or is it possible to bind the admin interface to a certain port?

thanks 4 your help!
lacky

Björn X

Thursday 20 October 2005 9:48:24 am

Yes you can do that... but it is nothing you can do within Exponential

You will need to use apache for this. Have a look in the apache docs

Marko Žmak

Thursday 20 October 2005 10:18:30 am

Just for the info, why do you want to restrict access to some IP adresses? Doesn't the user and roles system in eZ provide enough functionality?

--
Nothing is impossible. Not if you can imagine it!

Hubert Farnsworth

Günther Lackner

Friday 21 October 2005 1:21:30 am

It is a security matter. If I make the admin interface only reachable at an specific PORT, I can restrict the access to this PORT in the firewall. So nobody can even access the admin page. Just computers which I can trust.

lacky

Marko Žmak

Friday 21 October 2005 11:37:35 am

Well you could do this with "Location" (or "LocationMatch") and "Alow/Deny" directives in Apache. Something like this:

<Location index.php/my_ez_site/admin/*>
Order Deny, Allow
Deny From All
Allow From <your_ip_list>
</Location>

but check the correct syntax fo these directives, I haven't been using them for quite a while.

And there's no need for binding the admin interface to another port.

--
Nothing is impossible. Not if you can imagine it!

Hubert Farnsworth