diff --git a/geode-book/master_middleman/source/subnavs/geode-subnav.erb b/geode-book/master_middleman/source/subnavs/geode-subnav.erb index c88b7fd9b4cd..49cd752f9757 100644 --- a/geode-book/master_middleman/source/subnavs/geode-subnav.erb +++ b/geode-book/master_middleman/source/subnavs/geode-subnav.erb @@ -23,7 +23,7 @@ limitations under the License.
+
### RestrictedMethodAuthorizer
@@ -182,7 +182,7 @@ Complete these items to implement a custom method authorizer.
## Changing the Method Authorizer
You can set the `MethodInvocationAuthorizer` to be used by the query engine through the `gfsh` command-line utility.
-In addition, you can modify the configured `MethodInvocationAuthorizer` while members are already running by using the [alter query-service](../../tools_modules/gfsh/command-pages/alter.html#topic_alter_query_service) command.
+In addition, you can modify the configured `MethodInvocationAuthorizer` while members are already running by using the [alter query-service](../tools_modules/gfsh/command-pages/alter.html#topic_alter_query_service) command.
It is always advisable to make these changes during periods of low activity, though.
The following constraints apply when the `MethodInvocationAuthorizer` used by the cluster is changed in runtime:
diff --git a/geode-docs/managing/security/post_processing.html.md.erb b/geode-docs/security/post_processing.html.md.erb
similarity index 96%
rename from geode-docs/managing/security/post_processing.html.md.erb
rename to geode-docs/security/post_processing.html.md.erb
index c2ccc68f4016..736ca117752f 100644
--- a/geode-docs/managing/security/post_processing.html.md.erb
+++ b/geode-docs/security/post_processing.html.md.erb
@@ -38,7 +38,7 @@ on the identity of the requester (principal).
By default, the key and value parameters to the `processRegionValue` method
are references to the region entry.
Modify copies of these parameters to avoid changing the region entries.
-[Copy on Read Behavior](../../basic_config/data_entries_custom_classes/copy_on_read.html) discusses the issue.
+[Copy on Read Behavior](../basic_config/data_entries_custom_classes/copy_on_read.html) discusses the issue.
+Every component of Apache Geode is built with security considerations as a top priority. However, certain security
+solutions require user-specific design and implementation. Geode's default configuration combines maximum flexibility
+and performance without any input needed from the user. Because of this, certain security measures like
+**[authentication](authentication_overview.html)**,
+**[authorization](authorization_overview.html)** and
+**[over-the-wire encryption](ssl_overview.html)**
+are absent from a default Geode installation.
+It is highly recommended that users review Geode's security capabilities and implement them as they see fit. See the
+**[Security Implementation Introduction and Overview](implementing_security.html)**
+to get started with Apache Geode security.
+
+Additional documentation related to security can be found on Apache Geode Wiki
+
+[Geode Security Framework](https://cwiki.apache.org/confluence/display/GEODE/Geode+Security+Framework) and
+[Geode Integrated Security](https://cwiki.apache.org/confluence/display/GEODE/Geode+Integrated+Security).
diff --git a/geode-docs/managing/security/ssl_example.html.md.erb b/geode-docs/security/ssl_example.html.md.erb
similarity index 100%
rename from geode-docs/managing/security/ssl_example.html.md.erb
rename to geode-docs/security/ssl_example.html.md.erb
diff --git a/geode-docs/managing/security/ssl_overview.html.md.erb b/geode-docs/security/ssl_overview.html.md.erb
similarity index 95%
rename from geode-docs/managing/security/ssl_overview.html.md.erb
rename to geode-docs/security/ssl_overview.html.md.erb
index b6c3bca06b03..7fa30463bf14 100644
--- a/geode-docs/managing/security/ssl_overview.html.md.erb
+++ b/geode-docs/security/ssl_overview.html.md.erb
@@ -32,7 +32,7 @@ For the protection of data in memory or on disk, <%=vars.product_name%> relies o
The SSL implementation ensures that only the applications identified by you can share cluster data in transit. In this figure, the data in the visible portion of the cluster is secured by the firewall and by security settings in the operating system and in the JDK. The data in the disk files, for example, is protected by the firewall and by file permissions. Using SSL for data distribution provides secure communication between <%=vars.product_name%> system members inside and outside the firewalls.
-
+
- **[Configuring SSL](implementing_ssl.html)**
diff --git a/geode-docs/tools_modules/pulse/pulse-auth.html.md.erb b/geode-docs/tools_modules/pulse/pulse-auth.html.md.erb
index 9b80ed8973ec..a7149dcb784a 100644
--- a/geode-docs/tools_modules/pulse/pulse-auth.html.md.erb
+++ b/geode-docs/tools_modules/pulse/pulse-auth.html.md.erb
@@ -38,7 +38,7 @@ In embedded mode, <%=vars.product_name%> uses an embedded Jetty server to host t
Pulse Web application. To make the embedded server use HTTPS, you must
enable the `http` SSL component in
`gemfire.properties` or `gfsecurity.properties`.
-See [SSL](../../managing/security/ssl_overview.html) for details on configuring these parameters.
+See [SSL](../../security/ssl_overview.html) for details on configuring these parameters.
These SSL parameters apply to all HTTP services hosted on the JMX Manager, which includes the following: