Block certain IPs from submitting jobs.

salilab · Sep 21, 2015 · 75c4533 · 75c4533
1 parent a26ca73
commit 75c4533
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/doc/modules/frontend.rst b/doc/modules/frontend.rst
@@ -184,7 +184,8 @@ the web frontend.
       is one of 'index', 'submit', 'queue', 'results', 'help', 'download'.
       It should simply return if access is allowed, or throw an
       :exc:`~saliweb::frontend.AccessDeniedError` exception if access is not
-      permitted. By default, it simply returns, allowing all access.
+      permitted. By default, it simply returns, allowing all access, for all
+      pages except the submit page, from which certain IPs are blocked.
 
    .. method:: download_results_file(job, file)
 

diff --git a/perl/saliweb/frontend.pm b/perl/saliweb/frontend.pm
@@ -992,6 +992,11 @@ sub get_pdb_chains {
 
 sub check_page_access {
     my ($self, $page_name) = @_;
+    if ($page_name eq "submit"
+        && $self->cgi->remote_addr() eq '64.54.136.144') {
+        throw saliweb::frontend::AccessDeniedError(
+                    "Submission of jobs by this IP address is not allowed");
+    }
 }
 
 sub format_user_error {