Re: [Bodington-developers] Testing SP : groups-xml-mapper-policy

[Atif S. <BM...@bm...>]

Matthew Buckett wrote:

>
>Ok, but this isn't a very good solution as you end up saying
>
>"To read my notes on this go to 
>http://bodington/opensite/building/floor/ if you are a member of Leeds 
>or someone else with an account on bodington or if you are a member of 
>the Leeds Shibb federation go to http://bodington/site/building/floor/
>
>  
>
Indeed.

Getting past the sp guard to do parallel auth (i.e. internal) is gone be 
a miracle.

The problem is the sp guard is protecting the entire bodington i.e. /site/*

I could protect a single page in bodington for example 
/site/bs_template_sp_login.html THEN we can do parallel auth (i.e. 
internal)

The reason why we could do parallel auth is that the guard would be 
protecting the following url:
*  /site/bs_template_sp_login.html

The guard would allow all urls under /site/* through but NOT 
/site/bs_template_sp_login.html

The single url protection does have drawbacks.............

I would add this feature for 2.10 i.e. allow the depolyers to decide if 
single url protection will be used OR entire bodington protection ( i.e. 
/site/* url)

For 2.8 it's going to entire bodington protection ( i.e. /site/* url) 
because at moment I am neck deep in socket work until August 4th

Ta
Atif.