--- loncom/auth/loncacc.pm	2001/11/29 19:12:44	1.17
+++ loncom/auth/loncacc.pm	2001/12/21 16:57:54	1.18
@@ -2,7 +2,7 @@
 # Cookie Based Access Handler for Construction Area
 # (lonacc: 5/21/99,5/22,5/29,5/31 Gerd Kortemeyer)
 #
-# $Id: loncacc.pm,v 1.17 2001/11/29 19:12:44 www Exp $
+# $Id: loncacc.pm,v 1.18 2001/12/21 16:57:54 harris41 Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -26,9 +26,14 @@
 #
 # http://www.lon-capa.org/
 #
+# YEAR=2000
 # 6/15,16/11,22/11,
+# YEAR=2001
 # 01/06,01/11,6/1,9/25,9/28,11/22,12/25,12/26,
 # 01/06/01,05/04,05/05,05/09 Gerd Kortemeyer
+# 12/21 Scott Harrison
+#
+###
 
 package Apache::loncacc;
 
@@ -51,11 +56,11 @@ sub constructaccess {
     my $capriv='user.priv.ca./'.
                $ownerdomain.'/'.$ownername.'./'.
 	       $ownerdomain.'/'.$ownername;
-    map {
+    foreach (keys %ENV) {
         if ($_ eq $capriv) {
            return ($ownername,$ownerdomain);
         }
-    } keys %ENV;
+    }
 
     return '';
 }
@@ -176,6 +181,61 @@ sub handler {
 1;
 __END__
 
+=head1 NAME
+
+Apache::lonacc - Cookie Based Access Handler for Construction Area
+
+=head1 SYNOPSIS
+
+Invoked (for various locations) by /etc/httpd/conf/srm.conf:
+
+ PerlAccessHandler       Apache::loncacc
+
+=head1 INTRODUCTION
+
+This module enables cookie based authentication for construction area
+and is used to control access for three (essentially equivalent) URIs.
+
+ <LocationMatch "^/priv.*">
+ <LocationMatch "^/\~.*">
+ <LocationMatch "^/\~.*/$">
+
+Whenever the client sends the cookie back to the server, 
+if the cookie is missing or invalid, the user is re-challenged
+for login information.
+
+This is part of the LearningOnline Network with CAPA project
+described at http://www.lon-capa.org.
+
+=head1 HANDLER SUBROUTINE
+
+This routine is called by Apache and mod_perl.
+
+=over 4
+
+=item *
+
+load POST parameters
+
+=item *
+
+store where they wanted to go (first url entered)
+
+=back
+
+=head1 OTHERSUBROUTINES
+
+=over 4
+
+=item *
+
+constructaccess($url,$ownerdomain) : See if the owner domain and name
+in the URL match those in the expected environment.  If so, return 
+two element list ($ownername,$ownerdomain).  Else, return null string.
+
+=back
+
+=cut