Limit access of user groups by IP Address

[wnelson]

Hello,

We are a financial services company who for legal reasons cannot have employees logging in to Cerberus from home. Limiting groups access to the office IP address would be a big help. Some users, such as principals of the company should be able to log in from anywhere.

Thanks,

Rob

[Hildy]

This is something that would be better handled by an actual firewall than by an attempt to limit access programmatically in the Cerberus code. With access limitations in the code, you forever have to worry about every new feature / plugin / update compromising that. You're better off using a firewall to limit access to the web server itself to only internal IPs and (certain select) authenticated external IPs / users.