Enabling the Perforce Administrator via Mobile Device

Enabling the P4 Administrator
Via Mobile Device
Xavier Galvez
Senior Engineer
Advanced Micro Devices, Inc.

© 2011

THE PROBLEM

•  Granting access is a 24/7 operation

THE PROBLEM

•  Engineering teams span across the world

THE PROBLEM

•  Access to areas is tightly regulated

THE PROBLEM

•  A single team is authorized to give access

THE PROBLEM

•  A single team is authorized to give access
•  Be able to perform this task whenever and wherever

THE SOLUTION

•  Leverage the mobile device

THE SOLUTION

•  Create an interface accessible by web browser

THE SOLUTION

•  Use the browser on the mobile device

THE SOLUTION

•  Use the browser on the mobile device
•  Do it securely

CONTEXT

This presentation touches on:
•  Breadth of the organization
•  Permissions in the protection table
•  Centralized authorization process

CONTEXT

This presentation touches on:
•  Breadth of the organization
•  Permissions in the protection table
•  Centralized authorization process

Then I discuss:
•  Evolution of the solution
•  Simplicity
•  Where to go from here

GLOBAL SCOPE

grp_northamerica

GLOBAL SCOPE

grp_northamerica grp_israel

GLOBAL SCOPE

grp_northamerica grp_israel grp_india

GLOBAL SCOPE

grp_northamerica grp_israel grp_india grp_shanghai

DEPOT STRUCTURE & PERMISSIONS

depot

stg main rel


r ACC_rel //depot/rel/...
w bm_rel //depot/rel/...
w ACC_rel //depot/rel/8.10/...
r ACC_rel -//depot/rel/*/acc.txt
w REG_rel //depot/rel/*/acc.txt
r ACC_main //depot/main/...
w bm_merc //depot/main/merc/... depot
r ACC_merc //depot/main/merc/...
w ACC_merc //depot/stg/merc/src/...
w ACC_merc //depot/stg/merc/doc/...
w nda_merc //depot/stg/merc/nda/...
w reg_merc //depot/stg/merc/acc.txt
w bm_venus //depot/main/venus/...
stg main rel
r ACC_venus //depot/main/venus/...
w ACC_venus //depot/stg/venus/src/...
w ACC_venus //depot/stg/venus/doc/...
w nda_venus //depot/stg/venus/nda/...
w reg_venus //depot/stg/venus/acc.txt
s grp_admins //...


stg main rel
r ACC_main //depot/main/... merc
w bm_merc //depot/main/merc/...
s grp_admins //...


stg main rel
r ACC_main //depot/main/... merc
src
w nda_merc //depot/stg/merc/nda/... doc
s grp_admins //...


stg main rel
r ACC_main //depot/main/... merc merc
src
s grp_admins //...


stg main rel
src
r ACC_venus //depot/main/venus/... venus
w ACC_venus //depot/stg/venus/doc/... src
w reg_venus //depot/stg/venus/acc.txt doc
s grp_admins //...


stg main rel
src
w ACC_merc //depot/stg/merc/src/... venus
w bm_venus //depot/main/venus/... venus
s grp_admins //...


stg main rel
r ACC_main //depot/main/... merc merc 8.10
src merc
w nda_merc //depot/stg/merc/nda/... doc venus
s grp_admins //...


stg main rel
r ACC_main //depot/main/... merc merc 8.10
src merc
nda venus
nda
s grp_admins //...

PERMISSIONS: HIGH-LEVEL TEAMS

bm_rel
r ACC_rel -//depot/rel/*/acc.txt bm_merc
r ACC_main //depot/main/... nda_merc
w bm_merc //depot/main/merc/... reg_merc
w ACC_merc //depot/stg/merc/doc/... bm_venus
nda_venus
w ACC_venus //depot/stg/venus/src/... reg_venus
w nda_venus //depot/stg/venus/nda/... grp_admins
s grp_admins //...

PERMISSIONS: HIGH-LEVEL TEAM EXAMPLES

r ACC_main //depot/main/...
w ACC_merc //depot/stg/merc/doc/... bm_venus
w nda_venus //depot/stg/venus/nda/... grp_admins
s grp_admins //...

PERMISSIONS: ACCESS GROUPS

ACC_rel
r ACC_rel -//depot/rel/*/acc.txt REG_rel
r ACC_main //depot/main/... ACC_main
w bm_merc //depot/main/merc/... ACC_merc
w ACC_merc //depot/stg/merc/doc/... ACC_venus
s grp_admins //...

PERMISSIONS: ACCESS GROUP EXAMPLE

ACC_rel
grp_shanghai
s grp_admins //...

PERMISSIONS: ACCESS GROUP EXAMPLE

ACC_rel
grp_northamerica
s grp_admins //...

PERMISSIONS: COMBINATION EXAMPLE

ACC_rel
bm_venus
grp_northamerica
s grp_admins //...

CREATING ACCOUNTS VIA NEWUSER.EXE

PROBLEMS WITH BINARIES

•  Newer versions need to be recompiled.

PROBLEMS WITH BINARIES

•  Newer versions need to be recompiled.
•  Deployment.

ADVANTAGES WITH WEB APPS

•  Newer versions available right away.


•  Experimental versions can be easily tested.


•  Real-time validation on inputs.


•  Real-time validation on inputs.
•  OS-independent.

LEVERAGE EXISTING RESOURCE #1: WEB SERVER

LEVERAGE EXISTING RESOURCE #2: BLACKBERRY

internet

wireless network

BES firewall

AMD

LEVERAGE EXISTING RESOURCE #2: BLACKBERRY

LEVERAGE EXISTING RESOURCE #3: iOS

internet

wireless network

secure firewall
VPN

AMD

LEVERAGE EXISTING RESOURCE #3: iOS

SECURITY

Wireless Solutions
•  BlackBerry Enterprise Solution for Blackberries
•  Secure VPN for iOS devices

SECURITY

Wireless Solutions

HTTP is not secure, use HTTPS!
•  Encrypts the HTTP message prior to transmission
•  Decrypts the message upon arrival
•  Requires the use of CA certificates

SECURITY

Wireless Solutions

HTTP is not secure, use HTTPS!
•  Encrypts the HTTP message prior to transmission
•  Decrypts the message upon arrival
•  Requires the use of CA certificates

User Authentication and Identification
•  REMOTE_USER environment variable

REDUCING RISK

Keep the location of the web page unknown
•  Only known to Perforce admins

REDUCING RISK

Keep the location of the web page unknown
•  Only known to Perforce admins

Limit what can be done on the web page
•  Create a new user account
•  Display information from p4 protects and p4 groups
•  Add an existing user to currently existing groups
•  Remove the user from a group
•  Reset the password of an existing user

WHAT NEXT?

Server-side APIs
•  P4Java, P4Perl, P4Ruby, P4Python, P4PHP
•  ASP.NET with Perforce C/C++ API

WHAT NEXT?

Server-side APIs

Client-side Technologies
•  jQuery, jQuery Mobile, HTML5

WHAT NEXT?

Server-side APIs

Client-side Technologies
•  jQuery, jQuery Mobile, HTML5

More Features!
•  Monitor and restart servers
•  Most-used commands can be called

CONCLUSION

The result:
•  Simple mechanism
•  Took advantage of existing resources
•  Latest web technologies were not necessary
•  Quick development, fast deployment

CONCLUSION

The result:
•  Simple mechanism
•  Took advantage of existing resources
•  Latest web technologies were not necessary
•  Quick development, fast deployment

The advantages:
•  Web page + mobile device allows rich feature set
•  Write once, run on all
•  Feel at home with the same interface
•  Not just work hard, but work SMART

Thank you!

xavier.galvez@amd.com

ICON CREDITS

•  http://www.iconshock.com/
•  http://fasticon.com/
•  http://johnfreeborn.com/
•  http://www.deleket.com/
•  http://www.customicondesign.com/
•  http://www.visualpharm.com/
•  http://www.icons-land.com/
•  http://3dlb.com/

Enabling the Perforce Administrator via Mobile Device

Recomendados

Recomendados

Mais conteúdo relacionado

Destaque

Destaque (20)

Semelhante a Enabling the Perforce Administrator via Mobile Device

Semelhante a Enabling the Perforce Administrator via Mobile Device (20)

Mais de Perforce

Mais de Perforce (20)

Último

Último (20)

Enabling the Perforce Administrator via Mobile Device