| Package TWiki::Users
Singleton object that handles mapping of users to wikinames and
vice versa, and user authentication checking.
Construct the user management object
ObjectMethod findUser ($name[,$wikiname][,$nocreate]) -> $userObject
-
$name - login name or wiki name
-
$wikiname - optional, wikiname for created user
-
$nocreate - optional, disable creation of user object for user not found in TWikiUsers?
Find the user object corresponding to $name, which may be either a
login name or a wiki name. The name is looked up in the
TWikiUsers? topic. If $name is found (either in the list
of login names or the list of wiki names) the corresponding
user object is returned. In this case $wikiname is ignored.
If they are not found, and $nocreate is true, then return undef.
If $nocreate is false, then a user object is returned even if
the user is not listed in TWikiUsers?.
If $nocreate is false, and no $wikiname is given, then the
$name is used for both login name and wiki name.
If nocreate is off, then a default user will be created with their wikiname
set the same as their login name. This user/wiki name pair can be overridden
by a later createUser call when the correct wikiname is known, if necessary.
ObjectMethod createUser ($login,$wikiname) -> $userobject
Create a user, and insert them in the maps (overwriting any current entry).
Use this instead of findUser when you want to be sure you are not going to
pick up any default user created by findUser. All parameters are required.
ObjectMethod addUserToTWikiUsersTopic ($user) -> $topicName
Add a user to the TWikiUsers? topic. This is a topic that
maps from usernames to wikinames. It is maintained by
Register.pm, or manually outside TWiki.
ObjectMethod initializeRemoteUser ($remoteUser) -> $loginName
Return value: $remoteUser
Acts as a filter for $remoteUser. If set, $remoteUser is filtered for
insecure characters and untainted.
If not user is passed, the remote user defaults to $cfg{DefaultUserLogin}
(usually 'guest').
If we got here via an authentication status failure, then the remote user
is set to blank, effectively signalling an illegal access.
If no remote user name was passed in, the user defaults to
$cfg{DefaultUserLogin}.
|
