search

igriffiths / pwm

Automatically exported from code.google.com/p/pwm
0 stars 0 forks source link

Enhancement: Configure shortcuts via HTTP header instead of ldap search #1

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
Current configuration (as of b914) allows configuring shortcuts to be
presented to users based on ldap search query.

Enhancement is to present shortcuts based on values within an http header.   

Whereas a header may be present such as:

X-PWM-Shortcut.1=http://www.google.com;;;Google;;;Google Search

PWM could be configured to look for headers (X-PWM-Shortcut.1 in this
example), and present shortcuts based in the header.

Original issue reported on code.google.com by jrivard on 4 Jan 2010 at 8:45

GoogleCodeExporter commented 9 years ago 
This will be difficult to specify per user. There is no "IF" logic in a header 
policy. 

From an Access Manager point of view, it might be better do to something like 
the
following.
Inject into Custom Header
 Custom Header Name: X-PWM-Shortcuts
 Value:          Roles

This populates the header with all the roles the user has in a comma separated 
list
(could also be set to ; if required)

PWM should then read the header, separate the entries and then compare the roles
values with links. Roles can be determined by IF THEN ELSE operators, making 
them
more flexible.

For example, if the X-PWM-Shortcuts header was filled with the following roles:

GoogleRole,sales,marketing,administrators,user,NovellRole,mailInternal

And the config file was as follows:

#X-PWM-Shortcut.x=HeaderEntry;;;Link Address;;;Label;;;Description
X-PWM-Shortcut.1=GoogleRole;;;http://www.google.com;;;Google;;;Google Search
X-PWM-Shortcut.2=NovellRole;;;http://www.novell.com;;;Novell;;;The Novell 
website
X-PWM-Shortcut.3=mailInternal;;;https://mail.bogus.com;;;WebMail;;;Your internal
webmail system
X-PWM-Shortcut.4=Portal;;;https://portal.bogus.com;;;Portal;;;The company portal

PWM would show google, novell and webmail based on the roles.

Would that be easy to do?

Original comment by HRVermeu...@gmail.com on 8 Jan 2010 at 9:52

GoogleCodeExporter commented 9 years ago 
Implemented in b945

Original comment by jrivard on 1 Jun 2010 at 8:40

GoogleCodeExporter commented 9 years ago 
Closing as resolved.

Original comment by jrivard on 16 Aug 2010 at 5:01