From 01405e740a227ca3226370aeba85b256c619aca5 Mon Sep 17 00:00:00 2001
From: Ricardo Monla <rmonla@frlr.utn.edu.ar>
Date: Wed, 25 Feb 2026 19:12:35 -0300
Subject: [PATCH] =?UTF-8?q?feat(ops):=20Inyecci=C3=B3n=20de=20credenciales?=
 =?UTF-8?q?=20'utnlr'=20en=20Gestor=20de=20Archivos=20(APPs)=20con=20permi?=
 =?UTF-8?q?sos=20de=20escritura?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bitacoras/2026-02-25.md  |  1 +
 servicios/apps/index.php | 33 ++++++++++++++++-----------------
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/bitacoras/2026-02-25.md b/bitacoras/2026-02-25.md
index 5edb0aeb..43aee7b7 100644
--- a/bitacoras/2026-02-25.md
+++ b/bitacoras/2026-02-25.md
@@ -29,6 +29,7 @@
 
 | Tiempo | Descripción |
 | :--- | :--- |
+| 🔑 19:11 | Alta de Credenciales en Gestor de Archivos. A pedido del usuario, se inyecta en caliente (sin downtime) el usuario `utnlr` en la instancia `apps` (`TinyFileManager`), validado contra su respectivo vector criptográfico salt (hash bcrypt). En simultáneo, se revoca la política de solo-lectura (`$readonly_users`) permitiendo que este usuario efectúe subidas (`upload`) de archivos. |
 | 🔀 18:55 | Reestructuración de Servicio de Archivos. A solicitud del usuario, se renombra y migra la instancia de `TinyFileManager` (TFM). El alias cambia oficialmente de `tfm` a `apps`. Se modifican las variables en código (PHP `FM_SELF_URL`), se renombra el contenedor de Docker (`srvv-apps`) y se reescribe el proxy inverso en Nginx. Adicionalmente, se habilita el acceso vía HTTP puro sobre la IP local (`10.0.10.8`), añadiendo una excepción al bloque redireccional del puerto 80. |
 
 ### srv-dasu
diff --git a/servicios/apps/index.php b/servicios/apps/index.php
index d600081a..5db1597d 100644
--- a/servicios/apps/index.php
+++ b/servicios/apps/index.php
@@ -27,13 +27,12 @@ $use_auth = true;
 // Generate secure password hash - https://tinyfilemanager.github.io/docs/pwd.html
 $auth_users = array(
     'rmonla' => '$2y$10$UfZGPTOglFaCpkRrYyWESeBtkgI8jIR24pAYS/TkuDlehWZaCOQtu', //lhsurnm77NS8
-    'utnlarioja' => '$2y$10$ttPlWYT1jgGI.WJhEiWpgeBzYlqHb5s4k30Yq.T5LoY2Q3YhuUEqG', //utnlarioja
+    'utnlr' => '$2y$10$YUzDzAvWwolsrlj9gqGGNex097gUT4jw/rKdoh7U6yrVu.p.C9.Ja', //utnlarioja
 );
 
 // Readonly users
 // e.g. array('users', 'guest', ...)
 $readonly_users = array(
-    'utnlarioja'
 );
 
 // Global readonly, including when auth is not being used
@@ -4981,22 +4980,22 @@ function fm_show_header()
 
             <!-- Confirm Modal -->
             <script type="text/html" id="js-tpl-confirm">
-                                                <div class="modal modal-alert confirmDailog" data-bs-backdrop="static" data-bs-keyboard="false" tabindex="-1" role="dialog" id="confirmDailog-<%this.id%>" data-bs-theme="<?php echo FM_THEME; ?>">
-                                                    <div class="modal-dialog" role="document">
-                                                        <form class="modal-content rounded-3 shadow" method="post" autocomplete="off" action="<%this.action%>">
-                                                            <div class="modal-body p-4 text-center">
-                                                                <h5 class="mb-2"><?php echo lng('Are you sure want to') ?> <%this.title%> ?</h5>
-                                                                <p class="mb-1"><%this.content%></p>
-                                                            </div>
-                                                            <div class="modal-footer flex-nowrap p-0">
-                                                                <button type="button" class="btn btn-lg btn-link fs-6 text-decoration-none col-6 m-0 rounded-0 border-end" data-bs-dismiss="modal"><?php echo lng('Cancel') ?></button>
-                                                                <input type="hidden" name="token" value="<?php echo $_SESSION['token']; ?>">
-                                                                <button type="submit" class="btn btn-lg btn-link fs-6 text-decoration-none col-6 m-0 rounded-0" data-bs-dismiss="modal"><strong><?php echo lng('Okay') ?></strong></button>
-                                                            </div>
-                                                        </form>
+                                                    <div class="modal modal-alert confirmDailog" data-bs-backdrop="static" data-bs-keyboard="false" tabindex="-1" role="dialog" id="confirmDailog-<%this.id%>" data-bs-theme="<?php echo FM_THEME; ?>">
+                                                        <div class="modal-dialog" role="document">
+                                                            <form class="modal-content rounded-3 shadow" method="post" autocomplete="off" action="<%this.action%>">
+                                                                <div class="modal-body p-4 text-center">
+                                                                    <h5 class="mb-2"><?php echo lng('Are you sure want to') ?> <%this.title%> ?</h5>
+                                                                    <p class="mb-1"><%this.content%></p>
+                                                                </div>
+                                                                <div class="modal-footer flex-nowrap p-0">
+                                                                    <button type="button" class="btn btn-lg btn-link fs-6 text-decoration-none col-6 m-0 rounded-0 border-end" data-bs-dismiss="modal"><?php echo lng('Cancel') ?></button>
+                                                                    <input type="hidden" name="token" value="<?php echo $_SESSION['token']; ?>">
+                                                                    <button type="submit" class="btn btn-lg btn-link fs-6 text-decoration-none col-6 m-0 rounded-0" data-bs-dismiss="modal"><strong><?php echo lng('Okay') ?></strong></button>
+                                                                </div>
+                                                            </form>
+                                                        </div>
                                                     </div>
-                                                </div>
-                                            </script>
+                                                </script>
             <?php
 }