Extension Security Improvements (2.11)


Extension Basics

Title
Security Improvements (2.11)
Name
ckanext-security-2.11
Type
Public extension
Description
Comprehensive security enhancements for CKAN 2.11 including authentication, authorization, and protection mechanisms.
CKAN versions

~2.11.0

Show details

These CKAN Versions are exactely matched:

Download-Url (zip)
Download-Url commit date
2024-08-28
Url to repo
Category
Authentication & Security


Background Infos

Description (long)
Show details

The Security Improvements extension provides a comprehensive suite of security enhancements specifically designed for CKAN 2.11, addressing modern cybersecurity challenges and compliance requirements for data portals. This critical extension implements multiple layers of protection including advanced authentication mechanisms, session management improvements, CSRF protection, input validation hardening, and API security enhancements. The system includes features such as password policy enforcement, account lockout mechanisms, suspicious activity monitoring, and brute force attack prevention. Advanced security features include SQL injection prevention, XSS protection, secure header configuration, and content security policy implementation. The extension provides audit logging for security events, user activity monitoring, and integration with external security information systems. Administrative tools include security dashboard reporting, vulnerability scanning integration, and compliance checking against security frameworks like OWASP. Essential for government agencies handling sensitive data, organizations with strict security compliance requirements, enterprises requiring SOC 2 or ISO 27001 compliance, and any CKAN deployment exposed to public internet requiring robust security posture against evolving cyber threats.

Version
Latest
Version release date
2024-08-28
Contact name
Datopian Team
Contakt email
Contact Url
(not set)


Installation Guide

Configuration hints

Security-focused extension with authentication, CSRF protection, and audit logging

Plugins to configure (ckan.ini)
security
CKAN Settings (ckan.ini)
# ckanext.security.domain = 'your-domain.com' # ckanext.security.secret_key = 'your-secret-key' # ckanext.security.password_policy = true # ckanext.security.login_max_attempts = 5 # ckanext.security.lockout_period = 600 # ckanext.security.audit_enabled = true
DB migration to be executed
security initdb
<< back to Extensions