Domain Restrict module is able to restrict users from logging into other domains. But when implementing a single sign on kind of structure where
I have a parent site (example.com) and sub sites (sub1.example.com) and (sub2.example.com).
A user user1 is only allowed to login to sub1.example.com and he also gets logged into example.com
He should not be able to access sub2.example.com

Issue here is once user1 is logged in i can directly access sub2.example.com, as the restriction only checks access while logging in.

I believe the module should check each time a user accesses the site.

I am not sure if this is a duplicate of #923384
CommentFileSizeAuthor
#1 restrict_domain_hopping-1117702.patch2.22 KBrajarju

Comments

rajarju’s picture

Category: bug » feature
Status: Active » Needs review
StatusFileSize
new2.22 KB

I have added the save domain check in init for the page. Have to see if its going work out or should have configurable option in the admin section to enable this checking..