Re: [Phpgacl-general] protecting 'non-owned' pages/apps with phpgacl?
Brought to you by:
ipso
|
From: Mike B. <ip...@sn...> - 2006-01-03 23:35:24
|
You can interface to phpGACL via SOAP already, and I believe there is a AUTH_SOAP module for Apache. Though I've never tried it myself, it should work fine for you. On Tue, 2006-01-03 at 12:37 -0800, OpenMacNews wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: RIPEMD160 >=20 > hi all, >=20 > >>> If you really want to do it, I suggest just using a global include fi= le, > >>> unless you want more fine grained permissions, which you will need to > >>> modify almost every page in the 3rd party app.=20 >=20 > i'm still thinking about phpgacl 'control' of non-php dirs & files ... >=20 > in principle, it should be possible to access phpgacl's auth data via dir= ect sql query in an > .htaccess-based auth management script, no? >=20 > if true, then 'weaker' dirs/file -- those not directly controlled by phpg= acl invocation in php > souece code -- could be protected by placing a .htaccess file in the 'top= ' dir of interest, > wherein an sql query to phpgacl (or session vars?) would determine access= or not ... >=20 > i think this would (a) provide complete phpgacl control of access -- albe= it not as fine-grained > as a 'pure' implementation, and (b) would NOT use the typical .htaccess-d= rive popup login window. >=20 > viable, or am i barking up the wrong tree here? >=20 > cheers, >=20 > richard >=20 >=20 > /"\ > \ / ASCII Ribbon Campaign > X against HTML email, vCards > / \ & micro$oft attachments >=20 > [GPG] OpenMacNews at gmail dot com > fingerprint: 50C9 1C46 2F8F DE42 2EDB D460 95F7 DDBD 3671 08C6 > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.2 (Darwin) >=20 > iEYEAREDAAYFAkO64HwACgkQlffdvTZxCMYnIgCeOsizTjOAnrXcckP84KDf0T6/ > EIYAnjMa499yFv4Wa8g5w2jiCM5F4OUz > =3DPn5e > -----END PGP SIGNATURE----- >=20 >=20 >=20 > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log fi= les > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://ads.osdn.com/?ad_id=3D7637&alloc_id=3D16865&op=3Dclick > _______________________________________________ > Phpgacl-general mailing list > Php...@li... > https://lists.sourceforge.net/lists/listinfo/phpgacl-general --=20 Mike Benoit <ip...@sn...> |