Domain Restrict module is able to restrict users from logging into other domains. But when implementing a single sign on kind of structure where
I have a parent site (example.com) and sub sites (sub1.example.com) and (sub2.example.com).
A user user1 is only allowed to login to sub1.example.com and he also gets logged into example.com
He should not be able to access sub2.example.com
Issue here is once user1 is logged in i can directly access sub2.example.com, as the restriction only checks access while logging in.
I believe the module should check each time a user accesses the site.
I am not sure if this is a duplicate of #923384
| Comment | File | Size | Author |
|---|---|---|---|
| #1 | restrict_domain_hopping-1117702.patch | 2.22 KB | rajarju |
Comments
Comment #1
rajarju commentedI have added the save domain check in init for the page. Have to see if its going work out or should have configurable option in the admin section to enable this checking..