[dev] External access tickets

Ralf Lang lang at b1-systems.de
Thu Mar 7 09:22:59 UTC 2019


Hallo,

I need to provide throwaway access to some shared resources in a
horde_shares based application.
This means, the subject to grant access to will not be a horde user, but
access will not be granted globally.

Think of a scenario where you want to give - potentially time-limited,
revokable - access to a calendar, addressbook, file or similar resource
to an external party.

Strategies to implement

- Have an application specific table with some auth string, related
resource ID, expiry date

OR

- Make this a feature of Horde_Shares (separate table app_sharesng_tickets)

OR

- Make this a feature of the RPC/Rest/access stack.

What would make most sense / have a chance for committing back into Horde?



Kludges/Workarounds

- have a separate vhost with a separate auth table/source but shared
application/resource tables.


--
Ralf Lang

Linux Consultant / Developer
Tel.: +49-170-6381563
Mail: lang at b1-systems.de
B1 Systems GmbH
Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de
GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537



More information about the dev mailing list