AccessControl OR

Young, Darren Darren.Young at chicagobooth.edu
Thu Jul 20 15:13:58 EDT 2017


I¹ve read the docs on the AccessControl OR operator and wanted to be sure
I¹m using it correctly. The following rules is supposed to allow access if
the user is in one of the groups.

<!--
  /secure/alumni open to alumni, full-time, evening, weekend, phd, staff,
faculty and exec MBA
  Ticket 00468688
-->
                    <Path name="alumni" authType="shibboleth"
requireSession="true">
  <AccessControl>
    <OR>
      <Rule 
require="ucisMemberOf">uc:org:booth:affiliationgroups:alumni</Rule>
      <Rule 
require="ucisMemberOf">uc:org:booth:affiliationgroups:faculty</Rule>
      <Rule 
require="ucisMemberOf">uc:org:booth:affiliationgroups:gsb_students</Rule>
      <Rule 
require="ucisMemberOf">uc:org:booth:affiliationgroups:staff</Rule>
      <Rule 
require="ucisMemberOf">uc:org:booth:affiliationgroups:phd</Rule>
    </OR>
  </AccessControl>
                    </Path>


Is that the correct placement of the <OR> element?

Thanks,

Darren



More information about the users mailing list