> >If above holds true, then this can be used as a starting point >when developing DAV, indeed. >But, I'm afraid that people would really need both (basic and digest >and/or some other scheme in the future) at the same time when it comes >to deployment. That's why a hook in the Ns_AuthorizeRequest allowing >other schemes would be a good thing. Hopefully this thread will serve >as a kick for somebody to consider doing a proper integration work in >the core server.
I still don't see why you can't write a module in tcl or in C to replace ns_perm (maybe using it as a starting point). Why does this require hacking the core. We have an authentication scheme in OpenACS that authorizes requests by a different method right now. No C code is involved here. Just load the pre-auth filter first and if auth fails decide what to do. You do not even need to run ns_perm directly, as you can just call ns_requestauthorize in tcl with your own chosen arguments if you want that instead of the digest method.
