[Server-devel] XS - XO archiving and backup (was Re: [OLPC India] Issues on the ground )

[Martin Langhoff]

On Mon, Nov 10, 2008 at 9:08 AM, Bill Bogstad <bogstad at pobox.com> wrote:
> I've personally used the version in XS 0.4 to verify that individual
> journal entries can be restored.

Good to hear that - great and thanks!

>  However, you probably don't want to
> use this version in an actual deployment without changes.  There is
> absolutely no security on access to backups.  The web server lets
> anyone who can get an http connection to the schoolserver to download
> files from any users backup.  My understanding is that there are plans
> to
> move access into Moodle and take advantage of access control there.

100% correct. The backups right now offer no privacy - I had hoped to
address that for 0.5 - integrating the restore UI into Moodle - but it
proved to be a bit of a stretch. It is definitely a 0.6 goal.