|
Looking at this: http://meta.osqa.net/questions/1208/how-would-i-go-about-setting-up-a-private-qa-instance and the Jira referenced by it... For a quick solution to this, how hard would it be to set it up so there was a text file or something that listed allowed openid URLs? In that case, only two changes would be required: 1) No anonymous access to the site at all. Anonymous access is redirected to openid login page. 2) Part of the authorization process checks the openid url with the access list, if it doesn't match, it kicks to some not authorized page. Administrators would just manage that text file on the server. I know a nice admin page would be nicer, but I'm just thinking of a solution that maybe could be implemented very easily. |
Upon further understanding of some things, it seems likely that the ACL would be a list of emails instead of URLs which would probably be easier to manage anyway.