Skip to content
  • Chris Darroch's avatar
    Avoid calling access control hooks for internal requests with · 100dbd67
    Chris Darroch authored
    configurations which match those of the initial request.  Revert to
    the original behaviour (call access control hooks for internal requests
    with URIs different from the initial request) if any access control hooks
    or providers are not registered as permitting this optimization.
    Introduce wrappers for access control hook and provider registration
    which can accept additional mode and flag data.
    
    The configuration walk optimizations were originally proposed a while
    ago (see http://marc.info/?l=apache-httpd-dev&m=116536713506234&w=2);
    they have been used since then in production systems and appear to be
    stable and effective.  They permit certain combinations of modules
    and clients to function efficiently, especially when a deeply recursive
    series of internal requests, such as those generated by certain WebDAV
    requests, are all subject to the identical authentication and authorization
    directives.
    
    The major change from the original proposal is a cleaner mechanism for
    detecting modules which may expect the old behaviour.  This has been
    tested successfully with Subversion's mod_authz_svn, which specifically
    requires the old behaviour when performing path-based authorization based
    against its own private access control configuration files.
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@644525 13f79535-47bb-0310-9956-ffa450edef68
    100dbd67
To find the state of this project's repository at the time of any of these versions, check out the tags.