Received: (qmail 24256 invoked by uid 501); 22 Jan 2001 13:31:15 -0000
Message-Id: <20010122133115.24255.qmail@apache.org>
Date: 22 Jan 2001 13:31:15 -0000
From: Alessandro Vesely <vesely@tana.it>
Reply-To: vesely@tana.it
To: submit@bugz.apache.org
Subject: mod_auth_any doesn't store user's group information in the environment
X-Send-Pr-Version: 3.110

>Number:         7109
>Category:       mod_auth-any
>Synopsis:       mod_auth_any doesn't store user's group information in the environment
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          open
>Quarter:
>Keywords:
>Date-Required:
>Class:          change-request
>Submitter-Id:   apache
>Arrival-Date:   Mon Jan 22 05:40:00 PST 2001
>Closed-Date:
>Last-Modified:
>Originator:     vesely@tana.it
>Release:        1.3
>Organization:
apache
>Environment:
This is a request for enhancement
>Description:
I'm using mod_auth_dbm and I'm happy having a single dbm
for users/groups. I have a couple of dozens groups and give
different access rights based on groups. The problem is how
to display links on menu-like pages, since it's an obvious
nuisance to provide navigation to URLs that the user won't
be able to access.
>How-To-Repeat:
Writing an .shtml page for a logged-in user that,
rather than saying
- section A (for group A only)
- section B (for group B only)
will say something like
<!--#if expr="$REMOTE_USER_GROUPLIST = /GroupA/" -->
- section A
<!--#endif -->
<!--#if expr="$REMOTE_USER_GROUPLIST = /GroupB/" -->
- section B
<!--#endif -->
>Fix:
A workaround is to explicitely set the group list
in the enviroment, via an ad-hoc external program.

Including this feature directly in mod_auth_dbm
would save an additional lookup in the dbm file.

I hope this feature can be added for version 2.0
Keep up the good work!

Alessandro Vesely
>Release-Note:
>Audit-Trail:
>Unformatted:
 [In order for any reply to be added to the PR database, you need]
 [to include <apbugs@Apache.Org> in the Cc line and make sure the]
 [subject line starts with the report component and number, with ]
 [or without any 'Re:' prefixes (such as "general/1098:" or      ]
 ["Re: general/1098:").  If the subject doesn't match this       ]
 [pattern, your message will be misfiled and ignored.  The       ]
 ["apbugs" address is not added to the Cc line of messages from  ]
 [the database automatically because of the potential for mail   ]
 [loops.  If you do not include this Cc, your reply may be ig-   ]
 [nored unless you are responding to an explicit request from a  ]
 [developer.  Reply only with text; DO NOT SEND ATTACHMENTS!     ]