Skip to content
This repository has been archived by the owner on Sep 14, 2019. It is now read-only.

Disable /admin/ endpoint #67

Open
toolness opened this issue Jun 29, 2016 · 1 comment
Open

Disable /admin/ endpoint #67

toolness opened this issue Jun 29, 2016 · 1 comment
Labels
Milestone

Comments

@toolness
Copy link
Contributor

As mentioned in #59 (comment), the /admin/ endpoint isn't documented.

Upon further investigation, it appears this endpoint is actually provided by sandman2, and exposes a Flask-Admin blueprint that allows users to view and edit table data.

The endpoint is protected by basic auth, whose username and password are determined by the AUTOAPI_ADMIN_USERNAME and AUTOAPI_ADMIN_PASSWORD environment variables, respectively.

Here's an example dataset in the admin view:

screen shot 2016-06-29 at 10 01 32 am

One question I have is in regards to editing the data. It seems like the database is constantly flushed and re-built from CSV data, so I assume that any edits will be wiped away when the CSVs are re-imported?

@toolness
Copy link
Contributor Author

toolness commented Jul 5, 2016

Talked to @gbinal last week and it looks like we might actually just want to disable this endpoint entirely, particularly given the potential confusion/loss of data caused by editing via the admin UI and then importing a CSV later.

@vrajmohan vrajmohan changed the title Document /admin/ endpoint Disable /admin/ endpoint Jul 20, 2016
@gbinal gbinal added the urgent label Aug 15, 2016
@gbinal gbinal modified the milestone: MVP Aug 15, 2016
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

2 participants