[ka-Map-dev] [Bug 1512] New: [ka-Map] Addition of layer access control

[bugzilla-daemon at bugzilla.maptools.org]

http://bugzilla.maptools.org/show_bug.cgi?id=1512

           Summary: [ka-Map] Addition of layer access control
           Product: ka-Map
           Version: 0.3
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: core
        AssignedTo: ka-map-dev at lists.maptools.org
        ReportedBy: dmorissette at mapgears.com


This bug is to document a proposed addition: layer access control, and setting
the bases for more advanced access control down the road.

I will attach patches for review before committing to CVS.

Here is some short documentation explaining how this would work:

/*
 * This file provides a simple authentication and access control scheme
 * to allow controlling access to layers by user. It should be possible to
 * write a drop-in replacement for this file to different access control
 * mechanisms.
 * 
 * This implementation uses the $_SERVER['REMOTE_USER'] variable to lookup 
 * the authenticated visitor name. This implies that user/password validation
 * is handled by Apache using Basic Authentication (.htaccess + htpasswd 
 * files).
 *
 * If $_SERVER['REMOTE_USER'] is not set then access control is disabled,
 * or in other words everything is wide open.
 *
 * Layer access control:
 * ---------------------
 * 
 * The 'authorized_users' group metadata (on the first layer of the group),
 * if it is set, should contain a comma-delimited list of users that are
 * authorized to access this group. If the current user is listed then
 * it is given access to this group.
 * 
 * If 'authorized_users' is not set or empty for a given group then anyone
 * can access this group.
 *
 */



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.


Please do NOT reply to this email, use the link above instead to 
login to bugzilla and submit your comment. Any email reply to this
address will be lost.