Verndale.Restrictor 1.0.0

OptiAccess Restrictor Add-on

Overview

The OptiAccess Restrictor add-on provides an easy way to control access to specific areas of an Optimizely website. By default, it restricts access to key administrative paths and allows you to configure policies for role-based access control.

Installation & Configuration

1. Register the Add-on in Startup.cs

To enable the OptiAccess Restrictor, add it to the ConfigureServices method in Startup.cs:

public void ConfigureServices(IServiceCollection services)
{
    // Basic registration
    services.AddRestrictor();

    // OR: Configure with custom policies
    services.AddRestrictor(authorizationOptions =>
    {
        authorizationOptions.AddPolicy("My.AddOn.Policy.Name", policy =>
        {
            // Required when using Opti ID authentication
            policy.AddAuthenticationSchemes(OptimizelyIdentityDefaults.SchemeName);

            // Define roles required for this policy
            policy.RequireRole("WebAdmins", "SeoAdmins");
        });
    });

    ...
}

2. Initialize the Restrictor Handler (Register Only in Lower Environments)

To avoid restrictions in production, ensure that the Restrictor Handler middleware is only registered in lower environments (such as Integration and Preproduction). Modify the Configure method of Startup.cs as follows:

public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
{
    if (!env.IsProduction()) // Register only in non-production environments
    {
        app.UseRestrictor();
    }
    
    ...
}

3. Default Restricted Paths

By default, the following paths are allowed:

• /episerver
• /verndale-restrictor

You can manage access by whitelisting IP addresses through the add-on interface.

Usage

Once installed, navigate to the IP Whitelist add-on view to configure your access rules. Here, you can whitelist IP addresses to allow access to restricted areas.

Notes

• Easily enable or disable access restriction by checking the Enable checkbox in the admin view.
• Ensure that users who need access have the appropriate roles defined in the policy.
• If you need to restrict additional paths, update the configuration accordingly.