Changeset 4974 for trunk/gsdl/src/recpt/documentaction.cpp

Timestamp:

2003-07-18T10:02:55+12:00 (21 years ago)

Author:

sjboddie

Message:

Added the following options to the collect.cfg file:

=> auth_collection: This has two values document or collection, provides

authentication at the collection level or document level.

=> auth_groups: This allows user groups to access collections or documents.

=> allow_acls: When used in conjunction with authcollection = document to

activate the following two options, must be either true or false.

=> allowallexcept: This option requires a list of space separated document OID's

which means all documents can be viewed and the ones listed cannot
without authentication.

=> denyallexcept: This option requires a list of space separated document OID's

whereby all documents require authentication except those listed
by document OID's.

File:

• trunk/gsdl/src/recpt/documentaction.cpp (modified) (1 diff)

trunk/gsdl/src/recpt/documentaction.cpp

@@ -166 +166 @@
 
 bool documentaction::check_cgiargs (cgiargsinfoclass &argsinfo, cgiargsclass &args, 
-                    recptprotolistclass * /*protos*/, ostream &logout) {
-
-  // check gc argument
-  int arg_gc = args.getintarg("gc");
+                    recptprotolistclass *protos, ostream &logout) {
+
+   if(!args["d"].empty())
+      {
+     recptproto* collectproto = protos->getrecptproto (args["c"], logout);
+     if (collectproto != NULL)
+        {
+           ColInfoResponse_t *cinfo = recpt->get_collectinfo_ptr (collectproto, args["c"], logout);
+           
+           if(cinfo->auth_collection == "document" && cinfo->allow_acls) 
+          {
+             // both are either commented out or uncomment and are empty
+             if (cinfo->allowallexcept.empty() && cinfo->denyallexcept.empty())
+            {
+               //deny everything
+               args["uan"] = "1";
+               args["ug"] = cinfo->auth_group;
+            }
+
+             // both allowallexcept and denyallexcept are turned on !
+             else if (!cinfo->allowallexcept.empty() && !cinfo->denyallexcept.empty())
+            {
+               //deny everything
+               args["uan"] = "1";
+               args["ug"] = cinfo->auth_group;
+            }
+             
+             // only allowallexcept is set, so ask to authenticate for that article/doc
+             else if (cinfo->allowallexcept.find(args["d"]) != cinfo->allowallexcept.end() )
+            {
+               
+               args["uan"] = "1";
+               args["ug"] = cinfo->auth_group;
+            }
+             
+             // only denyallexcept is set, so ask to authenticate for that article/doc
+             else if (cinfo->denyallexcept.find(args["d"]) == cinfo->denyallexcept.end() )
+            {
+               args["uan"] = "1";
+               args["ug"] = cinfo->auth_group;
+            }
+             
+          }
+        }
+      }
+   // check gc argument
+   int arg_gc = args.getintarg("gc");
   if (arg_gc < 0 || arg_gc > 2) {
     logout << "Warning: \"gc\" argument out of range (" << arg_gc << ")\n";