Lazy sessions and authorization (Drupal)

[Cantor, Scott]

On 10/25/13, 10:24 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:

>* Laas Toom <Laas.Toom at ut.ee> [2013-10-25 16:10]:
>> On 25.10.2013, at 15:36, Peter Schober <peter.schober at univie.ac.at>
>>wrote:
>> 
>> > * Laas Toom <Laas.Toom at ut.ee> [2013-10-25 14:17]:
>> >> Is there a way to apply authorization when using lazy sessions?
>> > 
>> > Not with httpd directives, no.
>> 
>> But with Shibboleth XML directives this is possible?
>
>No. Sorry if I phrased that to lead you to think that.

I wouldn't expect so either but then I thought it might work if you did
something like an OR between "NOT valid-user" and some other attribute
rule.

I'm not sure, it probably would break for other reasons.

-- Scott