Módosítások

DrupalShibbolethReadmeDev

395 bájt hozzáadva, 2010. augusztus 23., 14:48
Dynamic role assignment: Sticky rules are implemented
# Login with your own credentials, you should have 'Administrator' rights now.
=== Dynamic role Role assignment ===
It's possible to assign roles to users based on their Shibboleth attributes.
* '''Role(s)''': checklist of roles to be assigned to the matching users
Revoking/adding a Shibboleth attribute rule will take effect immediately on next page refresh. The same applies when ==== Dynamic rules (default) ====Dynamic rules add roles to the set of headers is happened user, but '''do not save them to be changedthe user's profile'''{{ATTENTION_EN|This means that* Although the roles assigned by dynamic roles rules are '''NOT''' displayed on the user page''', even though the permissions assigned to the role are in effect for * the userroles assigned by dynamic rules are '''automatically revoked''' if the Shibboleth attributes change (ie. <brcode>eduPersonAffiliation</code>changes from <smallcode>This is a feature, not a bugstudent</code> to <code>alum</smallcode>),* Dynamic roles are only assigned to users logged in with Shibboleth. If thus if the user logs in by other meansthan Shibboleth, these the rule will not be triggered, so the roles will not be in effectassigned.}}
Additional roles can be assigned statically to the user (as an individual) by the administrator as normally. Every logged in user gets the role <code>Authenticated user</code> automatically.
==== Sticky rules ====
On the other hand, sticky rules do '''save the roles to the user's profile'''. Thus
* the roles assigned by sticky rules are displayed on the user page,
* the roles are not revoked automatically by the module,
* the roles will be in effect regardless of the login procedure.
=== Account linking ===

Navigációs menü