[Tickets #12271] gollem ftp login performed while not needed

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/12271
------------------------------------------------------------------------------
  Ticket             | 12271
  Created By         | maciej.uhlig at us.edu.pl
  Summary            | gollem ftp login performed while not needed
  Queue              | Horde Groupware Webmail Edition
  Version            | 5.0.4
  Type               | Bug
  State              | Unconfirmed
  Priority           | 3. High
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


maciej.uhlig at us.edu.pl (2013-05-23 13:03) wrote:

Namely, while gollem application has 'active' registry status, horde  
tries to do ftp_login and user authorization even for those users who  
don't have gollem disk (and permission to use gollem). This leads to  
very long wait for horde screen display. ftp_login is called 8 times  
for one login (yes) and it makes some 30 seconds extra to wait for  
login.

Horde registry initialization should only be performed for these  
applications which user has permission to use.

Generally speaking, the reason is as follows:

- for every active application, Horde_Registry->hasPermission is  
called in listApps()
- hasPermission() makes isAuthenticated() check
- isAuthenticated() tries transparent authentication
- then callAppMethod() is called with 'noperms' => true
- and finally Gollem_Auth performs ftp_login

Until now application permissions, although defined, are not checked.