SQL-Ledger Accounting FAQ


SQL-Ledger security

  1. Security depends on how you configure your web server and SQL server and who at the shell level has access to which files and directories.

  2. If you do not want anyone to change the templates with the built-in editor set the files in templates/directory/ to read only or disable the menu item *Setup*.

  3. secure your SQL server
    PostgreSQL uses the pg_hba.conf file to control who has access to the server. Assuming you are on a private network (192.168.100.0), your database is called 'mycompany' and you connect with user 'dbuser', then add
       host    mycompany     192.168.100.0  255.255.255.0    dbuser ident

  4. in addition you can secure the tables from unauthorized access by setting up a different database user and GRANT rights. For instance, users without DELETE rights will still be able to use the program, change customers or vendors but will not be able to delete transactions. To lock all the tables GRANT SELECT rights only.

  5. use a secure shell

  6. use the authentication system from your web server

    etc, etc.