- Added new entry permission_loginas_personids_blacklist in config file permission.php

- Renamed method loginAS to loginASByUID in AuthLib.php
- Added new public method loginASByPersonId to AuthLib.php
- Renamed method connect to anonymousConnect in LDAPLib
- Method LDAPLib->connectUsernamePassword now checks both username and password if they are empty strings
- Added new constant LOGINAS_PERSONIDS_BLACKLIST to PermissionLib
- Renamed method isEntitledLoginAS to isEntitledLoginASByUID in PermissionLib
- Added new public method isEntitledLoginASByPersonId to PermissionLib
- Added new private method _inLAPersonIdsBlacklist to PermissionLib
This commit is contained in:
Paolo
2019-03-21 15:36:22 +01:00
parent 782e3fd1b1
commit 400a1adfde
4 changed files with 92 additions and 31 deletions
+5 -2
View File
@@ -2,11 +2,14 @@
if (!defined('BASEPATH')) exit('No direct script access allowed');
// List of permissions that are allowed to perform loginAs
// List of permissions that are allowed to perform loginAs (empty array to avoid any checks)
$config['permission_loginas_allowed'] = array('admin');
// List of permissions that cannot be gained with loginAs
// List of permissions that cannot be gained with loginAs (empty array to avoid any checks)
$config['permission_loginas_blacklist'] = array('admin');
// List of users whose identity cannot be obtained with loginAs
$config['permission_loginas_users_blacklist'] = array('_DummyLektor', '_DummyStudent');
// List of person ids whose identity cannot be obtained with loginAs
$config['permission_loginas_personids_blacklist'] = array(92);