Level 73
Sounds to me like you should tell them to fix it or look for another developer.
You can always try to connect via your phone and download the stuff that you need then connect back to their network.
1 like
Jul 19, 2022
11
Level 8
Working with annoyingly high level of data security
I am not sure if this is the correct place to ask (I'll delete if not), but right now I was assigned to a new Laravel project at work where the IT team made it almost impossible to code: Everything needs permissions from some higher level of Administrator. It's on Windows and whenever I try to download a file - it automatically blocks it. If I try to install a VSCode extension - there is no connection to the extensions center. If I want to use composer(!!) - I can't! Because I get cURL errors since there are no permissions to get stuff from the outer world.
The issue is that the support is rather incompetent and looks like they never worked with PHP/Laravel developers since they have no idea how to solve it themselves.
So for installing software, such as VSCode, it's less of an issue - because they just download the installation file, scan it and then I can install it.
But the real issues start with things like Composer - where I can't even use composer commands that need to download packages from the outside world, so composer install will not work with cURL errors (the downloads are blocked)
VSCode extension - you can't install, since you can't connect to the download center.
What can I suggest them to make it workable and still secured per their level?
Ty!
Level 8
@Tray2 Haha I am on the verge of doing so! I can't do anything.
You can't even do the phone thing since it blocks these stuff as well.
But then, if I need to install with composer many packages - it's quite cumbersome and prone to errors, I mean I don't think I ever installed from source, I just let Composer do the magic. Is it even possible to install whatever composer installs to the Laravel project? Is it perhaps just downloading and copying the package into the vendor folder? But as you said, it's not realistic. Need to figure out something else
How do I even install a VScode extension not from VSCode itself? :D
Tomorrow I will make it clear then, that it makes no sense to work like that
thank you
Level 102
Just be sure you are allowed to connect to your phone. My guess is no
But I would ask if they would allow you to use a different laptop and work from home. I see no way that this will get fixed without them opening some doors. Perhaps you can use github code spaces or phpstorm spaces, but they still need to allow you to connect
https://github.com/features/codespaces
https://github.com/mechawrench/php-laravel-codespaces-devcontainer
1 like
Level 102
I think you can use codespaces from the browser but I have never tried it myself
1 like
Level 8
@Sinnbeck Haha even their laptops to work from home are connected to their network and you need to connect via VPN so same story. I guess they are just overly paranoid because it's a company that deals with a lot of sensitive data and money. I mean, I get it that it's risky, but there got to be solutions.
Maybe I can try tell them to use Composer behind proxy (But still you install packages from outside so maybe this is their fear rather than the proxy itself)
Level 8
@Sinnbeck I doubt they'll want to move to cloud solutions :/
Level 102
@Ligonsker yeah I meant that you weren't connected to the network for the duration of the coding process. Kinda like if they hired a freelancer. I don't assume your code needs acces to anything inside the company during development m
1 like
Level 8
@Sinnbeck but then i won't be able again to install what I need :D I will have to contact them and find solution
also I think I need to be connected via VPN before I can even log to my user
Level 102
@Ligonsker I don't think you read my reply fully
- Get a new laptop that isn't on the company network
- Work from home on your own internet
- Never log into the company network ever with the laptop
Level 102
Or you can suggest that you hand them a list of urls to open traffic for packagist, npm etc)
Level 122
i would get my cv out there. Picking up work at a more competent organisation should be possible
And don't be afraid to explain to your superiors why your productivity is low
Please or to participate in this conversation.