Synopsis: suggestion: check permissions via os-userbase

State-Changed-From-To: open-closed
State-Changed-By: marc
State-Changed-When: Mon Aug 11 09:04:01 PDT 1997
State-Changed-Why:
It is far more complicated than you make out to do so.
You then need to trust your web server with root and
Apache would have to run as root.  That isn't acceptable.
You also run into difficult issues with the (lack of) decent
security in web-based authentication.

We do have suexec, to let CGI scripts be run as users,
but it works slightly differently and is implemented by
an external wrapper that changes the uid.

Thanks for the suggestion.

Reply via email to