Lazy sessions and authorization (Drupal)

[Peter Schober]

* Cantor, Scott <cantor.2 at osu.edu> [2013-11-04 17:09]:
> Saying "ignore unauthorized session" is the same as not having the
> authz rule there.

I'm /guessing/ the application refuses access altogether once
authenticated but not authorized, i.e., you can't even see publicly
(unauthenticated) visible content?
Maybe a local logout & return to the site could be initiated from a
session hook instead?

@Laas: Be sure to let the Drupal shib extension devs know at NIIF.
I'm sure they're interested in a patch.
-peter