Files
iTop/modules/authent-external/model.authent-external.php

90 lines
3.2 KiB
PHP

<?php
// Copyright (C) 2010 Combodo SARL
//
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation; version 3 of the License.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program; if not, write to the Free Software
// Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
/**
* Authent External
* User authentication Module, for authentication outside of the iTop application
* for example using a .htaccess file. The web server is in charge of authentifying the users
* and providing the name (= 'login') of the authentified user in the $_SERVER['REMOTE_USER']
* variable that is passed to PHP. iTop will not make any attempt to authentify such users.
* Similarly once inside iTop, there is no way for the users to change their password or
* log off from the iTop application, this has to be handled outside of iTop.
*
* @author Erwan Taloc <erwan.taloc@combodo.com>
* @author Romain Quetiez <romain.quetiez@combodo.com>
* @author Denis Flaven <denis.flaven@combodo.com>
* @license http://www.opensource.org/licenses/gpl-3.0.html LGPL
*/
class UserExternal extends User
{
public static function Init()
{
$aParams = array
(
"category" => "addon/authentication",
"key_type" => "autoincrement",
"name_attcode" => "login",
"state_attcode" => "",
"reconc_keys" => array('login'),
"db_table" => "",
"db_key_field" => "id",
"db_finalclass_field" => "",
"display_template" => "",
);
MetaModel::Init_Params($aParams);
MetaModel::Init_InheritAttributes();
// Display lists
MetaModel::Init_SetZListItems('details', array('contactid', 'first_name', 'email', 'login', 'language', 'profile_list', 'allowed_org_list')); // Attributes to be displayed for the complete details
MetaModel::Init_SetZListItems('list', array('first_name', 'last_name', 'login')); // Attributes to be displayed for a list
// Search criteria
MetaModel::Init_SetZListItems('standard_search', array('login', 'contactid')); // Criteria of the std search form
MetaModel::Init_SetZListItems('advanced_search', array('login', 'contactid')); // Criteria of the advanced search form
}
/**
* Check the user's password... always return true. Actually the password
* is not even passed to this function, we trust the web server for authentifiying
* the users
*/
public function CheckCredentials($sPassword)
{
// External authentication: for iTop it's always Ok
return true;
}
public function TrustWebServerContext()
{
return true;
}
public function CanChangePassword()
{
// External authentication: iTop has no way to change a user's password
return false;
}
public function ChangePassword($sOldPassword, $sNewPassword)
{
return false;
}
}
?>