Skip to content

feat: exlude user - #10

Merged
vaggeliskls merged 1 commit into
mainfrom
feat/user-excluded
Mar 1, 2026
Merged

vaggeliskls merged 1 commit into
mainfrom
feat/user-excluded

Conversation

@vaggeliskls

Copy link
Copy Markdown
Owner

This pull request introduces support for per-folder user exclusions in access control, allowing administrators to specify folders that are accessible to all authenticated users except certain explicitly excluded users. This is achieved by extending the FOLDER_PERMISSIONS syntax and updating both the documentation and the entrypoint logic to generate the correct Apache authorization directives. Comprehensive tests and documentation updates are included to demonstrate and verify the new feature.

Access control and authorization improvements:

  • Added support for user exclusions in FOLDER_PERMISSIONS using the !username syntax (e.g., * !charlie), allowing any authenticated user except specified users to access a folder. This is implemented in the docker-entrypoint.sh by parsing exclusions and generating appropriate <RequireAll> and <RequireNone> blocks in Apache config.
  • Ensured that excluded users receive a 403 Forbidden response (not 401 Unauthorized), providing clear feedback when access is denied due to exclusion.

Documentation and examples:

  • Updated README.md, .env, and docs/examples.md to document the new exclusion syntax, provide usage examples, and clarify the permission model. [1] [2] [3] [4] [5]
  • Added a new example scenario in docs/examples.md demonstrating user exclusion in a Docker Compose setup.

Testing:

  • Expanded scenario 1 in docs/tests.md and tests/scenario-1-basic-auth.sh to include dedicated tests for user exclusion, verifying that excluded users are denied access with 403 while others are allowed. [1] [2] [3]

Other documentation updates:

  • Updated scenario numbering in docs/examples.md to reflect the new exclusion example. [1] [2] [3]

@vaggeliskls
vaggeliskls merged commit 17899d0 into main Mar 1, 2026
1 check passed
@vaggeliskls
vaggeliskls deleted the feat/user-excluded branch March 1, 2026 02:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant