I am finishing (with FrancoBagnoli) an Apache ModPerl-based handler to handle authorization to dirs and scripts.

• there is a Plugin that:
  • saves the TWiki authorization settings (ALLOW/DENY CHANGE/RENAME/VIEW WEB/TOPIC) of pages and webs and the groups definitions in a Mysql database to speed up authentication (see next item)
• the Apache authorization handler:
  • uses the stored definitions for authentication at Apache level, this way
    • the authorization is handled by Apache without reading a lot of files
    • the authorization protects also the attachments
    • you can use WebDAV to edit attachments (it works like a breeze!)
• another Apache handler uses Apache::SessionManager to handle sessions both with cookies and with URI rewriting

Stay tuned ...

-- AndreaSterbini - 27 Aug 2003