Lazy sessions and authorization (Drupal)

Christopher Bongaarts cab at umn.edu
Tue Nov 5 11:10:06 EST 2013


On 11/4/2013 2:31 PM, Laas Toom wrote:
> I named it bad. What I meant was “Do not set ENV variables if not authorized” - essentially kicking the second group into being unauthenticated as far as this app is concerned.

I wonder if the attribute filtering in the SP could be (ab)used to 
accomplish this...

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%



More information about the users mailing list