Uporabniške pravice v sistemu ALGator

Bertoncelj, Matej (author), Dobravec, Tomaž (mentor)

V diplomski nalogi smo se lotili reševanja dveh poglavitnih problemov, ki sta povezana z varnostjo sistema. Prvi je razširitev obstoječega sistema za upravljanje uporabnikov, skupin in njihovih pravic. Obstoječi sistem nima implementiranih funkcionalnosti, ki bi omogočale karkoli v zvezi z uporabniki, skupinami in pravicami. V drugem delu je predstavljena vzpostavitvev dveh varnih komunikacijskih kanalov med strežnikom in odjemalcem ter med obema strežnikoma. Rezultat diplomske naloge je nadgrajen obstoječi sistem z novimi mehanizmi in funkcionalnostmi. Strežnika in uporabnik primarno komunicirajo prek protokola HTTP, kar pa v današnjih časih ni dovolj dobro in predvsem ni dovolj varno. Sistem smo zato nadgradili tako, da omogoča uporabo protokola HTTPS. V problem smo se morali zelo poglobiti in poiskati, kakšne so obstoječe rešitve in kako delujejo.

• Language: Slovenian
• Keywords: HTTPS, uporabnik, skupina, Java, Python, splet
• Work type: Bachelor thesis/paper
• Typology: 2.11 - Undergraduate Thesis
• Organization: FRI - Faculty of Computer and Information Science
• Year: 2024
• PID: 20.500.12556/RUL-164304
• COBISS.SI-ID: 215088899
• Publication date in RUL: 21.10.2024

Secondary language

• Language: English
• Title: User Permission in the ALGator System

Abstract

In this diploma thesis we tackled two major problems related to system security. One is the extension of the existing system for managing users, groups and their rights. The current system does not have functionalities in place that would enable anything related to users, groups and rights. The second part presents the establishment of two secure communication channels between server and client and between two servers. The result of the thesis is an upgrade to the existing system, with new mechanisms and functionalities. The servers and the user communicate primarily via the HTTP protocol, which is no longer good enough and, above all, not safe enough. We have therefore upgraded the system to enable the use of the HTTPS protocol. We had to delve deep into the problem to determine what the existing solutions were and how they worked.

• Keywords: HTTPS, user, group, Java, Python, web