Access Control Rule in accessError template?

[Cantor, Scott]

On 7/10/13 9:38 AM, "GEANT - Lukas Hämmerle" <lukas.haemmerle at switch.ch>
wrote:

>In case of an accessError (you see if you are forbidden access due to
>the access control rules) it is often not transparent to the user why he
>was not allowed access to a page. Of course the template could specify
>in prosa why access was denied. However, it could also be handy to be
>able to have (as a parameter) the actual access control rule which Shib
>used to determined if somebody gets access to a page or not.
>
>Is this somehow possible? Maybe in an undocumented parameter?

I don't think so, the rules aren't labeled really, and I don't think
anything about the failing rule is visible. The plugin returns a tristate
(yes/no/indeterminate), and that's about it.

-- Scott