Anthill Pro Version 2.1 Security Notes

If you are looking into the authentication and authorization features 
that are present in the version 2.1 preview, here are a few notes to 
help you get started and to explain the limitations of these features.

First, the limitations of the authentication and authorization features. 
  These are not meant to provide fail-safe security for your AnthillPro 
installation.  These features are meant more as usability aids than as 
true security for the application.  By usability aids I mean that the 
combination of authentication and authorization can be used to create 
roles, which can then be used to limit which projects a user sees.  So I 
would not expose an Anthill Pro installation to the world by making it 
publicly accessible via the Internet with only the built-in security 
features.  A more fail-safe security system is in the works and will be 
available in version 3.0.

In order to use the authentication and authorization features you need 
to specifically enable them.  You can enable authentication from the 
Edit tab of the authentication screen, which you can get to by following 
the "Authentication" link on the left hand navigation tree.  The same 
goes for authorization.

There is a built in "admin" system account.  The default password for 
this account is "admin" -- it's probably a good idea to change this once 
you enable the authentication system :)

You can create new users and new roles and assign users to roles.  Once 
authorization is enabled, you will see an additional "Security" tab on 
most screens.  The "Security" tab will allow you to specify the roles 
that are permitted to execute actions on the associated module.  For 
example, you may want to have a "CoreProjects" role that is able to 
"view," "edit," and "build" all project modules.

The authorization system allows for very fine grained level of control 
and is very flexible.  If you have any questions about it or encounter 
any problems please let us know as soon as possible.

Thanks,

--The Anthill Team