[opencms-dev] Dynamic access control

[Nico Krause]

Hello Bart,

as I read somewhere - it is possible to give users some more attributes...
So give the user a new attribute like:

- User is allowed to connect from Or
- is not allowed fconnect from
network/IP-Address

So if you login a user add an additional check if the network/IP-Address
attributes matches... and login or don't login the user.  Maybe u can
download such sources or modells somewhere from the internet because it is a
very common way to do add such features to client / server apps. (but I
never did it).

Extending the (User/Group) Admin Screen with this form fields should be also
possible - I read something in the manual. But have no clue... how to do
this practicaly.

Restarting OpenCMS is not needed!

Implementing ACL's on each File.... mhmmm sounds like a complete
restructuring of OpenCMS....(database etc.) ;-) But here I have also no
clue - the OpenCMS developers might say more... but... maybe they say the
same as me - otherwise ... I'm also interested!

Thats all from my side.

Nico


----- Original Message -----
From: "Bart Elberg" <belberg at idealcorp.com>
To: <opencms-dev at www.opencms.org>
Sent: Tuesday, September 03, 2002 9:47 PM
Subject: [opencms-dev] Dynamic access control


> I am looking to provide dynamic access control to each page of a
> published website.  I am familiar with the OpenCms
> owner/group/permission system, but it does not meet my needs.  This
> control needs to be based on IP address or domain name and allow a site
> administrator to easily modify the access list (hopefully without
> restarting OpenCms or the server).  My initial thought is to modify the
> HTTP Request processing code.  This seems like a common need.  Has
> anyone done anything similar or have any recommendations?
>
> I am using OpenCms 4.6.1 with Tomcat 4.0.3 on Linux.
>
> All responses are appreciated (except those "I'm on vacation" responses!).
>
> THANKS!!
>
> Bart Elberg
>