
Debian README for phpgacl
=========================

Changes from the upstream version
---------------------------------

The Debian version for phpgacl introduces two changes from the upstream
version:

1.- The library can be configured (either through debconf or by editing it
    manually) through a configuration file located at:
    /etc/phpgacl/gacl.ini.php 
    Since this file contains sensitive information (database location
    and access passwords) it uses a restrictive permission set 
    (belongs to 'root' user, 'www-data' group and is mode 0640).

2.- The administrative interface used to graphically define the ACLs
    is available by connecting to the web server (if using Apache) 
    at http://127.0.0.1/phpgacl . It is, however, restricted, so no
    remote users can access the administrative interface nor the
    online documentation.

    If you need to bypass these restrictions please modify 
    /etc/phpgacl/apache.conf accordingly. Consider, however, that you
    are opening up the server to brute-force attacks to the
    administrative interface (which might compromise, if modified
    your server applications that rely on phpgacl) and you are 
    also disclosing the phpgacl version you use. Versions of PHP software
    in use are routenily used by worms out there, so beware.


Default ACL configuration
-------------------------

Is important to notice that before running phpGACL for the first time,
you need to enter http://<yourhost>/phpgacl/setup.php in order to configure
default ACLs.


----
Last Changed by: David Gil <dgil_AT_telefonica.net>
Last Changed at: Wed, 27 Sep 2006 12:56:25 +0200

