Thank you Chris, that is exactly what we are looking for as well, disabling the ability to run arbitrary code.
Do you happen to have the instructions for installing and enabling the extension handy? I'm not getting it quite right. On Wednesday, April 17, 2019 at 11:17:56 AM UTC-5, Chris Holdgraf wrote: > > More specifically - one of the goals of Voila is to be more secure. A good > default for this is to prevent the user from running arbitrary python code, > and keeping their interaction at the javascript layer (which is what > widgets are all using). > > You can find a few cool examples here: > https://mybinder.org/v2/gh/QuantStack/voila/stable?urlpath=voila/tree/notebooks > > The reason you don't see a ton of docs is because Voila is still in early > development mode, but I have heard docs are coming :-) > > On Wed, Apr 17, 2019 at 9:08 AM Tim Paine <[email protected] <javascript:>> > wrote: > >> Widgets are enabled >> >> Tim Paine >> tim.paine.nyc >> >> On Apr 17, 2019, at 12:07, Alexander Feiszli <[email protected] >> <javascript:>> wrote: >> >> Also, it says the notebook is "Read Only" in the docs. I would still like >> users to be able to provide input datasets via widgets. Is this disabled? >> >> On Wednesday, April 17, 2019 at 10:51:51 AM UTC-5, Alexander Feiszli >> wrote: >>> >>> That's exactly what I'm looking for! >>> >>> I'm trying to figure out how to use this now; there's very scant >>> documentation which makes this a little difficult. >>> >>> I'm running: >>> >>> pip install voila >>> jupyter nbextension install voila >>> >>> and get >>> >>> FileNotFoundError: [Errno 2] No such file or directory: 'voila' >>> >>> Do you know the apporpriate name/path to point to? >>> >>> Also, I believe this would be even more valuable running as a standalone >>> application, but that I think would be even more challenging to set up >>> without documentation. Do you know of any references I can look at? >>> >>> Thank you!! This extension looks very valuable. >>> >>> On Wednesday, April 17, 2019 at 10:05:25 AM UTC-5, Chris Holdgraf wrote: >>>> >>>> Check out Voila! ( https://github.com/QuantStack/voila) I bet that >>>> you'd find it interesting - it's quite similar to app mode :-) >>>> >>>> On Wed, Apr 17, 2019 at 6:54 AM Alexander Feiszli <[email protected]> >>>> wrote: >>>> >>>>> Hello, >>>>> >>>>> At my org we are looking to implement Jupyter notebooks in production >>>>> as sort of "mini-apps" for small groups of end users. The idea is that >>>>> the >>>>> data scientists can develop in Jupyterhub like an IDE and then push a >>>>> notebook into a CICD workflow, and then out pops a production version >>>>> that >>>>> is accessible by a particular group of users. The reason for this is that >>>>> the data scientists are not app developers, they do not want to write >>>>> webapps, just work on their algorithms, and their end users are very >>>>> small >>>>> groups, maybe 6-12 internal users, so it is unnecessary to have a >>>>> development team devoted to making nice looking apps for every algorithm >>>>> they write. We just need a mechanism by which the end user can provide >>>>> input data, it gets transformed by the notebook, generates some >>>>> charts/graphs, and then they receive transformed output data. >>>>> >>>>> For the end users, they should not be able to modify or create new >>>>> notebooks, simply run a single notebook. For that reason we are looking >>>>> at >>>>> the "appmode" plugin (https://github.com/oschuett/appmode). The next >>>>> thing we would like to do is have the production URL redirect to the >>>>> running "appmode" version of the notebook. In addition, the production >>>>> notebook server should basically just have all the other endpoints shut >>>>> off >>>>> or restricted, so that only this single "appmode" page is accessible. >>>>> >>>>> Can someone point me in the right direction for how I could modify a >>>>> notebook server to have requests to the base url redirect to this appmode >>>>> page, and how to restrict or turn off the other endpoints? I am a bit >>>>> lost >>>>> but guessing I will need to modify the handlers here: >>>>> https://github.com/jupyter/notebook/blob/master/notebook/notebook/handlers.py >>>>> >>>>> -- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "Project Jupyter" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>> an email to [email protected]. >>>>> To post to this group, send email to [email protected]. >>>>> To view this discussion on the web visit >>>>> https://groups.google.com/d/msgid/jupyter/d290d0dd-151e-4af0-a59c-e3cd38f78ccf%40googlegroups.com >>>>> >>>>> <https://groups.google.com/d/msgid/jupyter/d290d0dd-151e-4af0-a59c-e3cd38f78ccf%40googlegroups.com?utm_medium=email&utm_source=footer> >>>>> . >>>>> For more options, visit https://groups.google.com/d/optout. >>>>> >>>> -- >> You received this message because you are subscribed to the Google Groups >> "Project Jupyter" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To post to this group, send email to [email protected] >> <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/jupyter/dfef1a67-4345-44a8-a1da-af5565499d47%40googlegroups.com >> >> <https://groups.google.com/d/msgid/jupyter/dfef1a67-4345-44a8-a1da-af5565499d47%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Project Jupyter" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To post to this group, send email to [email protected] >> <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/jupyter/FA474923-AA9D-4C0B-9BF8-C5D19E1DF8D1%40gmail.com >> >> <https://groups.google.com/d/msgid/jupyter/FA474923-AA9D-4C0B-9BF8-C5D19E1DF8D1%40gmail.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > -- You received this message because you are subscribed to the Google Groups "Project Jupyter" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jupyter/dd259805-b04f-4ab6-b54f-190d783e8eea%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
