On 03/24/2016 02:39 PM, Rob Crittenden wrote:
> Adam Young wrote:
>> On 03/24/2016 05:43 AM, Jan Pazdziora wrote:
>>> On Wed, Mar 23, 2016 at 04:41:49PM +0100, Lukáš Hellebrandt wrote:
>>>> I created a design page for the feature:
>>>>
>>>> http://www.freeipa.org/page/URI-based-HBAC-design
>>> I try to put separate areas of concerns into separate emails to make
>>> it easy to keep track.
>>>
>>> The document says
>>>
>>>     There is a new field in HBAC rule details for adding URI PCRE
>>>     as plain text.
>>>
>>> We need an easy way for the user to enter multiple URLs for the same
>>> rule. The primary case is obviously the http / https duality
>>>
>>>     http://www.example.com/
>>>     https://www.example.com/
>>
>> Yes, let's split up the Hostname and the URI matching into two entities.
> 
> I wasn't entirely clear when I brought this up. The design is a little
> fuzzy whether the previous HBAC elements are all required but
> potentially we _already_ have the hostname that this applies to. I think
> dealing with just the path would be much more straightforward. Of course
> that doesn't take into account virtual hosts/SNI, so maybe host is
> relevant after all.
> 

Right, we only have to deal with path as the protocol is already in HBAC
rules.


-- 
Lukas Hellebrandt
Associate Quality Engineer
lhell...@redhat.com

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to