docs: Add more warning to root ACLs.

This commit is contained in:
Ruben Verborgh 2021-10-18 14:59:42 +01:00
parent d81b9ef2a4
commit 93b71eb726
3 changed files with 25 additions and 3 deletions

View File

@ -1,7 +1,18 @@
# Root ACL resource generated by the Community Server to allow public access
# WARNING: DO NOT USE UNMODIFIED UNLESS FOR TESTING PURPOSES.
# WHEN IN DOUBT, DELETE THIS DOCUMENT.
#
# This root ACL resource allows unrestricted public access to all documents and subcontainers.
#
# This document was automatically generated by the Community Solid Server
# because the "Expose a public root Pod" option was selected during setup,
# or because setup has been bypassed.
#
# We strongly suggest to edit this document such that it restricts permissions.
@prefix acl: <http://www.w3.org/ns/auth/acl#>.
@prefix foaf: <http://xmlns.com/foaf/0.1/>.
# Give all agents Read, Write, and Control permissions on everything
<#authorization>
a acl:Authorization;
acl:agentClass foaf:Agent;

View File

@ -1,7 +1,18 @@
# Root ACL resource generated by the Community Server to allow public access
# WARNING: DO NOT USE UNMODIFIED UNLESS FOR TESTING PURPOSES.
# WHEN IN DOUBT, DELETE THIS DOCUMENT.
#
# This root ACL resource allows unrestricted public access to all documents and subcontainers.
#
# This document was automatically generated by the Community Solid Server
# because the "Expose a public root Pod" option was selected during setup,
# or because setup has been bypassed.
#
# We strongly suggest to edit this document such that it restricts permissions.
@prefix acl: <http://www.w3.org/ns/auth/acl#>.
@prefix foaf: <http://xmlns.com/foaf/0.1/>.
# Give all agents Read, Write, and Control permissions on everything
<#authorization>
a acl:Authorization;
acl:agentClass foaf:Agent;

View File

@ -9,7 +9,7 @@
<% if (initialize && !registration) { %>
<h2>Root Pod</h2>
<p>
<strong>The root Pod is publicly accessible.</strong>
<strong>Warning: the root Pod is publicly accessible.</strong>
<br>
Prevent public write and control access to the root
by modifying its <a href=".acl">ACL document</a>.