--- loncom/auth/lonacc.pm 2005/07/05 21:30:14 1.66 +++ loncom/auth/lonacc.pm 2005/11/23 20:46:04 1.69 @@ -1,7 +1,7 @@ # The LearningOnline Network # Cookie Based Access Handler # -# $Id: lonacc.pm,v 1.66 2005/07/05 21:30:14 albertel Exp $ +# $Id: lonacc.pm,v 1.69 2005/11/23 20:46:04 www Exp $ # # Copyright Michigan State University Board of Trustees # @@ -92,6 +92,14 @@ sub handler { return HTTP_NOT_ACCEPTABLE; } } + if ($env{'user.name'} eq 'public' && + $env{'user.domain'} eq 'public' && + $requrl !~ m{^/+(res|public)/} && + $requrl !~ m{^/+adm/(help|logout|randomlabel\.png)}) { + $env{'request.querystring'}=$r->args; + $env{'request.firsturl'}=$requrl; + return FORBIDDEN; + } # ------------------------------------------------------------- This is allowed if ($env{'request.course.id'}) { &Apache::lonnet::countacc($requrl); @@ -171,6 +179,9 @@ sub handler { $r->header_out('Set-cookie',"lonID=$cookie; path=/"); return OK; } + if ($requrl=~m|^/+adm/+help/+|) { + return OK; + } # -------------------------------------------------------------- Not authorized $requrl=~/\.(\w+)$/; # if ((&Apache::loncommon::fileembstyle($1) eq 'ssi') ||