Lemonldap-Handlers-Generic

 view release on metacpan or  search on metacpan

doc/MatrixPolicy.html.en  view on Meta::CPAN

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Lemonldap::Handlers::MatrixPolicy  - Plugin  for Lemonldap sso system</title>
<link rev="made" href="mailto:root@localhost" />
</head>

<body style="background-color: white">

<p><a name="__index__"></a></p>
<!-- INDEX BEGIN -->

<ul>

	<li><a href="#name">NAME</a></li>
	<li><a href="#description">DESCRIPTION</a></li>
	<ul>

		<li><a href="#overlay">Overlay</a></li>
	</ul>

	<li><a href="#see_also">SEE ALSO</a></li>
	<li><a href="#copyright_and_license">COPYRIGHT AND LICENSE</a></li>
</ul>
<!-- INDEX END -->

<hr />
<center> <H1> Lemonldap::Handlers::MatrixPolicy </H1></center><p>
</p>
<hr />
<h1><a name="name">NAME</a></h1>
<pre>
    Lemonldap::Handlers::MatrixPolicy  - Plugin  for Lemonldap sso system</pre>
<p>
</p>
<hr />
<h1><a name="description">DESCRIPTION</a></h1>
<pre>
 MatrixPolicy is the default authorization manager  of lemonldap  websso framework .
 This module uses matrix (hash with two dimensions) in order to grant access or deny  on ressource.
 The first axial line is given by ATTRLDAP (or Majeur) the  second axial line is LDAPCONTROL (Mineur) parameter.</pre>
<pre>
 
 see <a href="http://lemonldap.sf.net">http://lemonldap.sf.net</a> for more infos .</pre>
<p>
</p>
<h2><a name="overlay">Overlay</a></h2>
<p>If you wat use your own autorization method you must use PLUGINPOLICY parameter like this :
  in httpd.conf : perlsetvar lemonldappluginpolicy MyModule</p>
<pre>
 Your module must accept  2 parameters : config (all the hash of config ) and session (all hash of session) 
 Your module must provide the 'get' method  and provide 'response' and 'profil' data object.</pre>
<pre>
  response may content : 0  : no session (time out) 
                         403: deny access by rules
                         503: deny access for all (service not available) 
  profil may content : string of role</pre>
<p>
</p>
<hr />
<h1><a name="see_also">SEE ALSO</a></h1>



( run in 2.893 seconds using v1.01-cache-2.11-cpan-39bf76dae61 )