optional check for vhb access

DatabayAG · Apr 28, 2021 · af3e180 · af3e180
1 parent 31b7647
commit af3e180
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/classes/class.ilVhbShibAuthConfig.php b/classes/class.ilVhbShibAuthConfig.php
@@ -34,6 +34,14 @@ public function __construct($a_plugin_object)
             'Einstellungen zum Anlegen und Auffinden von Benutzerkonten',
             ilVhbShibAuthParam::TYPE_HEAD
         );
+
+        $params[] = ilVhbShibAuthParam::_create(
+            'check_vhb_access',
+            'vhb-Zugriffsrecht prüfen',
+            'Prüft, ob das Shibboleth-Attribut "eduPersonEntitlement" die Zeichenkette "urn:mace:vhb.org:entitlement:vhb-access" enthält. Nur mit dieser erhalten Nutzer/-innen Zugriff.',
+            ilVhbShibAuthParam::TYPE_BOOLEAN
+        );
+
         $params[] = ilVhbShibAuthParam::_create(
             'local_user_suffix',
             'Suffix bei lokalen Benutzern',

diff --git a/classes/class.ilVhbShibAuthMatching.php b/classes/class.ilVhbShibAuthMatching.php
@@ -66,7 +66,7 @@ public function checkAccess(ilVhbShibAuthUser $user)
         /** @var ilErrorHandling $ilErr */
         $ilErr = $DIC['ilErr'];
 
-        if (!$this->hasVhbAccess()) {
+        if ($this->config->get('check_vhb_access') && !$this->hasVhbAccess()) {
             $ilErr->raiseError($this->plugin->txt('err_no_vhb_access'));
         }