Application access control in XMS

This feature provides an user based access control to your applications.

It relies on access.xml where you can define how the filtering should be.

Default access control order is "allow deny" (set in order attribute of root node access).

Further will look for nodes as below and grant access or not, based on the access order (allow or deny)



  1. /access/first_in_access_control_order/app[@name='path to app']/guest

  2. /access/first_in_access_control_order/app[@name='path to app']/all

  3. /access/first_in_access_control_order/unknown/guest

  4. /access/first_in_access_control_order/unknown/all

  5. /access/second_in_access_control_order/app[@name='path to app']/guest

  6. /access/second_in_access_control_order/app[@name='path to app']/all

  7. /access/second_in_access_control_order/unknown/guest

  8. /access/second_in_access_control_order/unknown/all



In defaults.php you will find:
define('XMS_USER_ACCESS_VAR', $_SESSION['XMS_CURRENT_USER']?$_SESSION['XMS_CURRENT_USER']:"guest");

This line defines where you store the current user and XMS_USER_ACCESS_VAR constant is used inside access.xml. You can change this line to match the session var name you use.
As you can see, if there is no session variable defined, the default user is guest.


 


Showing 5 from 0 out of

No comments
Showing 5 from 0 out of