[Zope] Limiting access to a Zope Site

[Jonathan]

----- Original Message ----- 
From: <hpinson at indepthl.com>
To: <zope at zope.org>
Sent: Friday, February 02, 2007 10:18 AM
Subject: [Zope] Limiting access to a Zope Site


> Hi.
>
> I'm looking for several differnt approaches to probably a fairly
> simple problem.
>
> I have a Zope site running behind apache rewrite rules.
>
> www.mysite.org
>
> That site needs to be publically accessable.
>
> A subdomain site (for development):
>
> dev.mysite.org
>
> needs to be accessable only to a team of developers, and by no one
> else.
>
> The developers may or may not have static IPs and move around quite a
> bit, so limiting access to a set of IPs is not a good option.
>
> Another possibility is making the whole (plone site) private, but
> that changes some key behaviors that we are working on.
>
> I'm looking for alternate approaches to making the subdomain only
> accessable to the developer team. Any suggestions?

Why don't you run two separate zope instances, one for production and one 
for development, and set up the apache rewrite rules so that www points to 
the production instance and dev points to the development instance?  This 
way you can mess around with the development version as much as you want 
(ie. run in debug mode, start/stop zope, etc) without impacting the 
production version.

Viability of this approach will depend somewhat on the hardware you are 
running on.


Jonathan