Hi all,

I am runnning a Drupal installation with LDAP integration.
When browsing files through the filebrowser module, the rights of the Apache user are used to access files and directories. When I set for example C:\files as the folder to browse, and create an Apache Alias to for example a location on a file server, it would be nice that the rights of the current Drupal user (logged in through LDAP) were used to determine which files are accessible to him/her and which aren't.
Is there any plan to include such possibilities in future versions of the module? Or are there other ways to handle this problem?

Thanks a lot!

Comments

Yoran’s picture

Version: 6.x-2.0-rc12 » 6.x-2.x-dev

Verrrrry difficult as doing this, we should be aware of the kind of operating system running underneath to act accordingly. Options do handle this would be :
1/ forking a PHP process with user rights... Not that easy as you can imagine
2/ Doing this at http deamon level using PHP-CGI, perhaps the most secure way
2/ add some new hooks in order to allow everyone to implement it's own security strategy

clivesj’s picture

Issue summary: View changes
Status: Active » Closed (won't fix)

If anyone needs this, please re-open and supply a patch