NAME

Apache::iNcom::UserDBAuthz - mod_perl authorization handler that use the UserDB.

SYNOPSIS

    PerlRequire Apache::iNcom:UserDBAuthz

    AuthType Basic
    AuthName "iNcom Users"

    PerlAuthenHandler   Apache::iNcom::UserDBAuthen
    PerlAuthzHandler    Apache::iNcom::UserDBAuthz

    require valid-user

    require user foo

    require group bar

    require user foo and write

    require group baz; exec on test

    require valid-user, admin code

DESCRIPTION

This module integrates the DBIx::UserDB module used by the Apache::iNcom framework with the apache authorization phase.

This module will set the authorization on the authenticated user by checking the DBIx::UserDB ACL.

CONFIGURATION

The DBIx::UserDB used is configured via the normal Apache::iNcom directives.

REQUIREMENTS DIRECTIVES

This module will let the user if ANY require directives match. This means that different require ar ORed together.

In a require directive, different clause can be ANDed together by separating them by and, comma (,) or semi-colon (;).

Here are the different expression that are understood by the module.

valid-user: This requirements will pass everytime the user was authenticated successfully.
user <username>: This requirement will succeed if the user's username is identical.
group <groupname>: This requirement will suceed if the user is a member of that group.
<privilege>: This requirement will succeed if the user has the specified privilege on the current URL. The INCOM_URL_PREFIX is stripped from the URL. The privilege is checked by using the allowed method of the UserDB.
<privilege> [on] <target>: This requirement will succeed if the user has the specified privilege on the specified target. The privilege is checked by using the allowed method of the UserDB.

AUTHOR

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.