Security

Determining which users may view change or administer resources and operations.

• Authorization and access control
• Validate

• Keep permission checks at the boundary
• Test and publish access rules
• Test with different users

Defining site module runtime and service settings.

• Configuration

• Configure hostnames and HTTPS
• Configure media sandboxing and an optional media runner
• Serve HTTPS on a privileged port

Verifying the identity of a user client or service.

• Authentication

• acceptable_password
• resetratelimit: Reset a site rate limiter

Documentation not covered by the other keyword groups in this split.

• Add a contact form
• decrypt: Decrypt a local encrypted backup file