Not a fully secure multi-user environment

[Alex-Ikanow]

The application is configured by default to "non-secure mode".

What this means is that any users can explore the readable file system by creating "file sources", by accessing the local resources via any source using the javascript engine, or by accessing local resources via Hadoop plugins.

To be clear though: only users with valid Infinit.e logins can access any part of the system at all.

If it is necessary to run securely with multiple users, this can be accomplished with 2 steps:

• Set "harvest.security=true" in /opt/infinite-install/config/infinite.configuration.properties
• Disable the plugin manager by setting "hadoop.local_mode=false" in the same config file

Then follow the "Changing the configuration" instructions here.

[Alex-Ikanow]

Update: If you upgrade to the October 2013 release (released first week of October), you can continue to run the plugin manager (but only admin users can launch tasks).

(If this function is urgently required, contact us and we can provide you with a patch.)