Skip to content
Commit 983db328 authored by Andre Malo's avatar Andre Malo
Browse files

as announced and with no objections:

mod_authz_owner: forward port of require file-owner/file-group functionality

The goal of the module is to do all the neccessary file system work to
figure out username and groupname. "Require file-owner" is completely
resolved within the module. "file-group" is only determined there and the
groupname will be extracted from the stat call and stored within the
r->notes. Done that, the module will decline, so that the group database
modules (mod_authz_groupfile, mod_authz_dbm) can verify the groupname with
their lists.
Thus every group module that supports the file-group requirement must be
hooked after mod_authz_owner. They have to recognize "file-group" and read
the groupname from r->notes. (If there's no name stored, the modules should
ignore the file-group requirement). The backstopper module will do its work
in worst case.

not solved yet:
- the module doesn't work as one could expect if the file doesn't exist in
  the first request round (consider MultiViews) (the 1.3 version has the
  same problem). I played around with some subrequest techniques, but got
  no helpful result. Is there any magic to recognize the actual resulting
  filename (if there is)?


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98281 13f79535-47bb-0310-9956-ffa450edef68
parent ed2941cd
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment