-
|
Recently migrated to Sveltia from Decap and installed the Github backend on Netlify as instructed in the guide. However, it now means that anyone with a GitHub account can login to the admin panel - is there a way to restrict access? |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 1 reply
-
|
Have you tried Decap CMS with the GitHub backend? Sveltia CMS uses the same OAuth process, so I don’t think this topic is specific to Sveltia. If your repository is public, there should be no concern. People can see your content with or without the CMS. Only people who have been invited to the repo and granted write access can commit. If your repository is private, only collaborators should be able to access. |
Beta Was this translation helpful? Give feedback.
-
|
Looks like Netlify/Decap CMS checks the user’s write permission at some point. Even though non-collaborators being able to sign in is not a security risk for public repositories, it is awkward UX-wise. So I’ll implement the same check. |
Beta Was this translation helpful? Give feedback.
-
|
Fixed in v0.49.2. |
Beta Was this translation helpful? Give feedback.
Fixed in v0.49.2.