Checkout Tools
  • last updated a few minutes ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Adds additional clarification, as requested in bz64167

PR58761: developer doc improvements.

Submitted By: Luca Toscano

  1. … 7 more files in changeset.
Simply remove trailing whitespace.

  1. … 204 more files in changeset.
whitespace fix
Changing to the new syntax highlighting WRT C source code
  1. … 6 more files in changeset.
reprecussions -> repercussions
  1. … 1 more file in changeset.
Fix up title and references to httpd
update license header text
  1. … 313 more files in changeset.
Update the copyright year in all .c, .h and .xml files

  1. … 497 more files in changeset.
Authz refactoring

Merge from branches/authz-dev

Basically here is a list of what has been done:

- Convert all of the authz modules from hook based to provider based

- Remove the ap_requires field from the core_dir_config structure

- Remove the function ap_requires() since its functionality is no

longer supported or necessary in the refactoring

- Remove the calls to ap_some_auth_required() in the core request

handling to allow the hooks to be called in all cases.

- Add the new module mod_authz_core which will act as the authorization

provider vector and contain common authz directives such as 'Require',

'Reject' and '<RequireAlias>'

- Add the new module mod_authn_core which will contain common

authentication directives such as 'AuthType', 'AuthName' and

'<AuthnProviderAlias>'

- Move the check for METHOD_MASK out of the authz providers and into

the authz_core provider vector

- Define the status codes that can be returned by the authz providers

as AUTHZ_DENIED, AUTHZ_GRANTED and AUTHZ_GENERAL_ERROR

- Remove the 'Satisfy' directive

- Implement the '<RequireAll>', '<RequireOne>' block directives to

handle the 'and' and 'or' logic for authorization.

- Remove the 'AuthzXXXAuthoritative' directives from all of the authz

providers

- Implement the 'Reject' directive that will deny authorization if the

argument is true

- Fold the 'Reject' directive into the '<RequireAll>', '<RequireOne>'

logic

- Reimplement the host based authorization functionality provided by

'allow', 'deny' and 'order' as authz providers

- Remove the 'allow', 'deny' and 'order' directives

- Merge mod_authn_alias into mod_authn_core

- Add '<RequireAlias>' functionality which is similar to

'<AuthnProviderAlias>' but specific to authorization aliasing

- Remove all of the references to the 'authzxxxAuthoritative'

directives from the documentation

- Remove the 'Satisfy' directive from the documentation

- Remove 'Allow', 'Deny', 'Order' directives from the documentation

- Document '<RequireAll>', '<RequireOne>', 'Reject' directives

- Reimplement the APIs ap_auth_type(), ap_auth_name() as optional

functions and move the actual implementation into mod_authn_core

- Reimplement the API ap_some_auth_required() as an optional function

and move the actual implementation into mod_authz_core

Major Changes:

- Added the directives <RequireAll>, <RequireOne>, <RequireAlias>,

Reject

- Expanded the functionality of the directive 'Require' to handle all

authorization and access control

- Added the new authz providers 'env', 'ip', 'host', 'all' to handle

host-based access control

- Removed the directives 'Allow', 'Deny', 'Order', 'Satisfy',

'AuthzXXXAuthoritative'

- Removed the ap_require() API

- Moved the directives 'AuthType', 'AuthName' out of mod_core and into

mod_authn_core

- Moved the directive 'Require' out of mod_core and into

mod_authz_core

- Merged mod_authn_alias into mod_authn_core

- Renamed mod_authz_dbm authz providers from 'group' and 'file-group'

to 'dbm-group' and 'dbm-file-group'

Benefits:

- All authorization and access control is now handle through two

directives, 'Require' and 'Reject'

- Authorization has been expanded to allow for complex 'AND/OR' control

logic through the directives '<RequireAll>' and '<RequireOne>'

- Configuration is now much simpler and consistent across the board

- Other modules like mod_ssl and mod_proxy should be able to plug into

and take advantage of the same provider based authorization mechanism

by implementing their own providers

Issues:

- Backwards compatibility between 2.2 and 2.3 configurations will be

broken in the area of authorization and access control due to the fact

that the directives 'allow', 'deny', 'order' and 'satisfy' have been

removed. When moving from 2.2 to 2.3 these directives will have to be

changed to 'Require all granted', 'Require all denied' or some variation

of the authz host-based providers.

- Existing third party authorization modules will have to adapt to the

new structure.

  1. … 44 more files in changeset.
fix function name in developer doc

PR: 33438

Submitted by: Bojan Smojver

Reviewed by: Jeff Trawick

  1. … 1 more file in changeset.
Update copyright year to 2005 and standardize on current copyright owner line.

  1. … 522 more files in changeset.
oops, readd the empty line

  1. … 52 more files in changeset.
fix copyright notice

  1. … 9 more files in changeset.
$Revision$ is slightly misdocumented (only available since svn 1.1)

use LastChangedRevision instead

  1. … 165 more files in changeset.
adjust properties and revision expansion of the English docs

  1. … 184 more files in changeset.
the up-to-date checker currently depends on a properly configured cvs in path

that's totally uncool. Let make cvs the work on the fly:

- start adding $Revision$ keyword to english files

  1. … 23 more files in changeset.
fix name of The Apache Software Foundation

  1. … 367 more files in changeset.
apply Apache License, Version 2.0

  1. … 8 more files in changeset.
remove the relativepath element from the documents.

  1. … 102 more files in changeset.
add the metafile attribute to all xml files.

  1. … 213 more files in changeset.
- new developer/index.xml

- add references from the subdocuments to the index file (<parentdocument>)

- fix German sitemap reference revision # to be up-to-date

  1. … 17 more files in changeset.
new XML

  1. … 2 more files in changeset.