59 lines
1.6 KiB
Perl
Executable File
59 lines
1.6 KiB
Perl
Executable File
package Lemonldap::Handlers::MatrixPolicy;
|
|
use strict;
|
|
use warnings;
|
|
our $VERSION = '3.1.0';
|
|
our $VERSION_LEMONLDAP = "3.1";
|
|
our $VERSION_INTERNAL = "3.1";
|
|
|
|
sub get
|
|
{
|
|
my $class= shift;
|
|
my %_param= @_;
|
|
|
|
my $self;
|
|
my $config =$_param{parameters}->{'config'};
|
|
my $session= $_param{'session'};
|
|
unless ($session) {
|
|
$self->{response} = 0; #0 time out
|
|
bless $self,$class;
|
|
return $self;
|
|
}
|
|
|
|
my $complement;
|
|
my $dn = $session->{dn};
|
|
$dn =~ s/ //g;
|
|
my $major = $config->{ORGANIZATION};
|
|
if( !defined($major) ){
|
|
$major = "authz_headers";
|
|
}
|
|
my $minor = lc($config->{APPLCODE});
|
|
|
|
if ( defined($major) && defined($minor) && exists($session->{$major}->{$minor}))
|
|
{
|
|
$complement = $session->{$major}->{$minor};
|
|
#### begin: here for he compatibility with older lemonldap
|
|
$complement =~ s/#.*//;
|
|
### end : here for he compatibility with older lemonldap
|
|
if ( defined($config->{REGEXPMATRIXPOLICY}) && $complement !~ $config->{REGEXPMATRIXPOLICY} ){
|
|
undef $complement;
|
|
}else{
|
|
$self->{response} = 200;
|
|
}
|
|
}
|
|
|
|
unless (defined $complement) {
|
|
$complement = '_DENY_';
|
|
$self->{response} = 403; #403 = FORBIDDEN 200 = OK
|
|
$complement = '_ALLOW_' && $self->{response} = '200' if lc($config->{ALLOW}) eq 'all';
|
|
undef $complement if ($self->{response} == '403' or $self->{response} == '503' );
|
|
}
|
|
|
|
$self->{response} = 503 if lc($config->{ALLOW}) eq 'disabled';
|
|
undef $complement if ($self->{response} == '403' or $self->{response} == '503' );
|
|
$self->{profil} = $complement ;
|
|
bless $self,$class;
|
|
return $self;
|
|
}
|
|
|
|
1;
|