[OpenSER-Devel] [ openser-Feature Requests-1985743 ] add function check_ruri() to uri_db module

[SourceForge.net]

Feature Requests item #1985743, was opened at 2008-06-05 19:27
Message generated for change (Comment added) made by henningw
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=743023&aid=1985743&group_id=139143

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: modules
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Klaus Darilion (klaus_darilion)
Assigned to: Nobody/Anonymous (nobody)
Summary: add function check_ruri() to uri_db module

Initial Comment:
Hi!

In a PUBLISH request, the AoR is in the RURI. Thus, to verify if an authenticated user is allowed to publish presence for a certain AoR the uri_db module should be extended (to align with check_from and check_to)

Currently I use

if (($au == $rU) && ($rd == $ar)) {
  sl_send_reply("403","auth-user - RURI mismatch");
  exit;
}

but this is not very nice and works only if authuser and username are the same.

----------------------------------------------------------------------

>Comment By: Henning Westerholt (henningw)
Date: 2008-06-06 14:34

Message:
Logged In: YES 
user_id=337916
Originator: NO

Hi Klaus,

perhaps it make sense to refactor the uri_db module to provide only one
function "check()" which evaluates pseudo-variables, instead of adding
another check_XXX function?

Henning

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=743023&aid=1985743&group_id=139143