Enabling the Perforce Administrator via Mobile Device

Enabling the P4 Administrator
Via Mobile Device
Xavier Galvez
Senior Engineer
Advanced Micro Devices, Inc.

© 2011

THE PROBLEM

•  Granting access is a 24/7 operation

THE PROBLEM

•  Engineering teams span across the world

THE PROBLEM

•  Access to areas is tightly regulated

THE PROBLEM

•  A single team is authorized to give access

THE PROBLEM

•  A single team is authorized to give access
•  Be able to perform this task whenever and wherever

THE SOLUTION

•  Leverage the mobile device

THE SOLUTION

•  Create an interface accessible by web browser

THE SOLUTION

•  Use the browser on the mobile device

THE SOLUTION

•  Use the browser on the mobile device
•  Do it securely

CONTEXT

This presentation touches on:
•  Breadth of the organization
•  Permissions in the protection table
•  Centralized authorization process

CONTEXT

This presentation touches on:
•  Breadth of the organization
•  Permissions in the protection table
•  Centralized authorization process

Then I discuss:
•  Evolution of the solution
•  Simplicity
•  Where to go from here

GLOBAL SCOPE

grp_northamerica

GLOBAL SCOPE

grp_northamerica grp_israel

GLOBAL SCOPE

grp_northamerica grp_israel grp_india

GLOBAL SCOPE

grp_northamerica grp_israel grp_india grp_shanghai

DEPOT STRUCTURE & PERMISSIONS

depot

stg main rel


r ACC_rel //depot/rel/...
w bm_rel //depot/rel/...
w ACC_rel //depot/rel/8.10/...
r ACC_rel -//depot/rel/*/acc.txt
w REG_rel //depot/rel/*/acc.txt
r ACC_main //depot/main/...
w bm_merc //depot/main/merc/... depot
r ACC_merc //depot/main/merc/...
w ACC_merc //depot/stg/merc/src/...
w ACC_merc //depot/stg/merc/doc/...
w nda_merc //depot/stg/merc/nda/...
w reg_merc //depot/stg/merc/acc.txt
w bm_venus //depot/main/venus/...
stg main rel
r ACC_venus //depot/main/venus/...
w ACC_venus //depot/stg/venus/src/...
w ACC_venus //depot/stg/venus/doc/...
w nda_venus //depot/stg/venus/nda/...
w reg_venus //depot/stg/venus/acc.txt
s grp_admins //...


stg main rel
r ACC_main //depot/main/... merc
w bm_merc //depot/main/merc/...
s grp_admins //...


stg main rel
r ACC_main //depot/main/... merc
src
w nda_merc //depot/stg/merc/nda/... doc
s grp_admins //...


stg main rel
r ACC_main //depot/main/... merc merc
src
s grp_admins //...


stg main rel
src
r ACC_venus //depot/main/venus/... venus
w ACC_venus //depot/stg/venus/doc/... src
w reg_venus //depot/stg/venus/acc.txt doc
s grp_admins //...


stg main rel
src
w ACC_merc //depot/stg/merc/src/... venus
w bm_venus //depot/main/venus/... venus
s grp_admins //...


stg main rel
r ACC_main //depot/main/... merc merc 8.10
src merc
w nda_merc //depot/stg/merc/nda/... doc venus
s grp_admins //...


stg main rel
r ACC_main //depot/main/... merc merc 8.10
src merc
nda venus
nda
s grp_admins //...

PERMISSIONS: HIGH-LEVEL TEAMS

bm_rel
r ACC_rel -//depot/rel/*/acc.txt bm_merc
r ACC_main //depot/main/... nda_merc
w bm_merc //depot/main/merc/... reg_merc
w ACC_merc //depot/stg/merc/doc/... bm_venus
nda_venus
w ACC_venus //depot/stg/venus/src/... reg_venus
w nda_venus //depot/stg/venus/nda/... grp_admins
s grp_admins //...

PERMISSIONS: HIGH-LEVEL TEAM EXAMPLES

r ACC_main //depot/main/...
w ACC_merc //depot/stg/merc/doc/... bm_venus
w nda_venus //depot/stg/venus/nda/... grp_admins
s grp_admins //...

PERMISSIONS: ACCESS GROUPS

ACC_rel
r ACC_rel -//depot/rel/*/acc.txt REG_rel
r ACC_main //depot/main/... ACC_main
w bm_merc //depot/main/merc/... ACC_merc
w ACC_merc //depot/stg/merc/doc/... ACC_venus
s grp_admins //...

PERMISSIONS: ACCESS GROUP EXAMPLE

ACC_rel
grp_shanghai
s grp_admins //...

PERMISSIONS: ACCESS GROUP EXAMPLE

ACC_rel
grp_northamerica
s grp_admins //...

PERMISSIONS: COMBINATION EXAMPLE

ACC_rel
bm_venus
grp_northamerica
s grp_admins //...

CREATING ACCOUNTS VIA NEWUSER.EXE

PROBLEMS WITH BINARIES

•  Newer versions need to be recompiled.

PROBLEMS WITH BINARIES

•  Newer versions need to be recompiled.
•  Deployment.

ADVANTAGES WITH WEB APPS

•  Newer versions available right away.


•  Experimental versions can be easily tested.


•  Real-time validation on inputs.


•  Real-time validation on inputs.
•  OS-independent.

LEVERAGE EXISTING RESOURCE #1: WEB SERVER

LEVERAGE EXISTING RESOURCE #2: BLACKBERRY

internet

wireless network

BES firewall

AMD

LEVERAGE EXISTING RESOURCE #2: BLACKBERRY

LEVERAGE EXISTING RESOURCE #3: iOS

internet

wireless network

secure firewall
VPN

AMD

LEVERAGE EXISTING RESOURCE #3: iOS

SECURITY

Wireless Solutions
•  BlackBerry Enterprise Solution for Blackberries
•  Secure VPN for iOS devices

SECURITY

Wireless Solutions

HTTP is not secure, use HTTPS!
•  Encrypts the HTTP message prior to transmission
•  Decrypts the message upon arrival
•  Requires the use of CA certificates

SECURITY

Wireless Solutions

HTTP is not secure, use HTTPS!
•  Encrypts the HTTP message prior to transmission
•  Decrypts the message upon arrival
•  Requires the use of CA certificates

User Authentication and Identification
•  REMOTE_USER environment variable

REDUCING RISK

Keep the location of the web page unknown
•  Only known to Perforce admins

REDUCING RISK

Keep the location of the web page unknown
•  Only known to Perforce admins

Limit what can be done on the web page
•  Create a new user account
•  Display information from p4 protects and p4 groups
•  Add an existing user to currently existing groups
•  Remove the user from a group
•  Reset the password of an existing user

WHAT NEXT?

Server-side APIs
•  P4Java, P4Perl, P4Ruby, P4Python, P4PHP
•  ASP.NET with Perforce C/C++ API

WHAT NEXT?

Server-side APIs

Client-side Technologies
•  jQuery, jQuery Mobile, HTML5

WHAT NEXT?

Server-side APIs

Client-side Technologies
•  jQuery, jQuery Mobile, HTML5

More Features!
•  Monitor and restart servers
•  Most-used commands can be called

CONCLUSION

The result:
•  Simple mechanism
•  Took advantage of existing resources
•  Latest web technologies were not necessary
•  Quick development, fast deployment

CONCLUSION

The result:
•  Simple mechanism
•  Took advantage of existing resources
•  Latest web technologies were not necessary
•  Quick development, fast deployment

The advantages:
•  Web page + mobile device allows rich feature set
•  Write once, run on all
•  Feel at home with the same interface
•  Not just work hard, but work SMART

Thank you!

xavier.galvez@amd.com

ICON CREDITS

•  http://www.iconshock.com/
•  http://fasticon.com/
•  http://johnfreeborn.com/
•  http://www.deleket.com/
•  http://www.customicondesign.com/
•  http://www.visualpharm.com/
•  http://www.icons-land.com/
•  http://3dlb.com/

Enabling the Perforce Administrator via Mobile Device

Recommended

Recommended

More Related Content

Viewers also liked

Viewers also liked (20)

Similar to Enabling the Perforce Administrator via Mobile Device

Similar to Enabling the Perforce Administrator via Mobile Device (20)

More from Perforce

More from Perforce (20)

Recently uploaded

Recently uploaded (20)

Enabling the Perforce Administrator via Mobile Device