Advanced Panel Unlock

How protections work

To make it security protections less obvious (and more difficult for students to suss out) there are three levels of password protection.

CAVEAT: This is low grade security at best and is relatively easy to work around.

1. Student / Regular User View

By default, the "Advanced" panel is visible, but only the "Export" tab is visible.

At the bottom of the "Advanced" panel is an "admin" password input field with no "Submit" button.

• If adminPassword has not been defined however, Admin Mode Disabled will be displayed.

2. Privileged Import User

For some projects, e.g. research groups, sometimes you need to allow a logged in user to be able to import node/edge data. There is a template setting that allows this:

allowLoggedInUserToImport = true

If this is set and a user is logged in, the "Import Data" panel will be visible.

3. Teacher

A teacher can access three teacher-enabled advanced panel tabs using a password:

• Template -- import/export
• Import/Export -- nodes and edges
• User Tokens

In order to access those items, a teacher must enter a password.

• The phrase is defined in the project template's adminPassword field.
• Each project can have its own password field, or of course, you can share it across instances.
• If adminPassword has not been defined however, Admin Mode Disabled will be displayed.
• There is no "Submit" button so the password is accepted as soon as the correct phrase is entered.
• Once the correct password has been entered, the input field will turn into a button "Admin Logout". Clicking that will re-enable the password input field. The password will remain active until you reload or click "Admin Logout"

4. Researcher: Look Up Password

If a teacher forgets the password, or a researcher needs to access the "Advanced" panel, what can they do?

We are disabling the ?admin=true override, so you will have to look up the password via the template.

Digital Ocean On Digital Ocean, the fix is to look up the current template via ssh.

1. In web console, type NC_CONFIG to determine the dataset name.

2. SSH to Digital Ocean and look up the template:

   ssh <digitalocean>
   cd nc-multiplex/netcreate-itest/runtime
   cat <dataset>.template.toml
   

3. Look for the adminPassword field.

Turbo360 On Turbo360, the fix is to look up the current template in Turbo360's portal.

1. Go to https://portal.turbo360.co/ and log in
2. Find the relevant project and click "Manage"
3. Click on the "Site" sidebar
4. Click on the "Storage" tab
5. Click on the <dataset>.template.toml file to download it
6. Open the file and look for the adminPassword field.