Triggering SP error page / restrict access to a list of users

[Cantor, Scott]

On 10/27/11 5:56 AM, "Manuel Haim" <haim at hrz.uni-marburg.de> wrote:
>
>can anyone tell me if it is possible to trigger an SP error page from
>within the protected web application?

No way other than manually creating some kind of error condition, but the
rest of your questions don't pertain to this one either.

>We have a use case where, after login, the web application should check
>a local database for allowed users, and then trigger the SP's "access
>denied" page if the user is not permitted to access the application.

That isn't an error page, it's an access denial page. There is no way to
use the SP's authorization hook from inside an application, the SP
enforces that before the application runs. The SP itself will do whatever
you tell it to do for a given request, whether that's nothing, htaccess
rules, or the XML plugin.

When the access denial occurs, the SP either returns a 403 through the web
server, or will serve up a template using the Errors/@access property.

>Would generating an xml file for SP XML Access Control [1] be an
>alternative for us? How is its performance? Or should this scenario be
>typically handled by setting an "eduPersonEntitlement" within our LDAP
>directory?

Certainly using user lists doesn¹t scale, no matter how it's handled.

-- Scott