Re: [Bodington-developers] Testing SP : groups-xml-mapper-policy

[Matthew B. <mat...@ou...>]

Atif Suleman wrote:
> Matthew Buckett wrote:
> 
>> Ok, but this isn't a very good solution as you end up saying
>>
>> "To read my notes on this go to 
>> http://bodington/opensite/building/floor/ if you are a member of Leeds 
>> or someone else with an account on bodington or if you are a member of 
>> the Leeds Shibb federation go to http://bodington/site/building/floor/
>>
>>  
>>
> Indeed.
> 
> Getting past the sp guard to do parallel auth (i.e. internal) is gone be 
> a miracle.
> 
> The problem is the sp guard is protecting the entire bodington i.e. /site/*
> 
> I could protect a single page in bodington for example 
> /site/bs_template_sp_login.html THEN we can do parallel auth (i.e. 
> internal)
> 
> The reason why we could do parallel auth is that the guard would be 
> protecting the following url:
> *  /site/bs_template_sp_login.html
> 
> The guard would allow all urls under /site/* through but NOT 
> /site/bs_template_sp_login.html

This is how we do WebAuth.

> The single url protection does have drawbacks.............

Apart from having to have the user select the authentication mode, any 
others?


-- 
  -- Matthew Buckett, VLE Developer
  -- Learning Technologies Group, Oxford University Computing Services
  -- Tel: +44 (0)1865 283660 http://www.oucs.ox.ac.uk/ltg/