The one place the preview policy lives. The public Shiny Server instance
(MS_PREVIEW unset) may resolve public versions only; the preview instance
– a second Shiny Server server block whose wrapper app.R sets
MS_PREVIEW=1 and is reachable only through the signed-in
preview.marinesensitivity.org vhost – may resolve everything. Enforcement is
by process, not by a trusted header: Shiny Server OSS opens its own
websocket to the R worker, so no proxy header ever reaches session$request,
and a client-supplied url_search could otherwise steer the shared instance
to a restricted release.
Usage
atlas_allow_access(preview = atlas_is_preview())Value
character vector to pass as allow_access to atlas_resolve_ver()