--- loncom/auth/lonstatusacc.pm 2009/01/15 21:01:37 1.6 +++ loncom/auth/lonstatusacc.pm 2009/06/13 20:28:56 1.7 @@ -1,7 +1,7 @@ # # LON-CAPA authorization for pages generated by server-status reports # -# $Id: lonstatusacc.pm,v 1.6 2009/01/15 21:01:37 raeburn Exp $ +# $Id: lonstatusacc.pm,v 1.7 2009/06/13 20:28:56 raeburn Exp $ # # Copyright Michigan State University Board of Trustees # @@ -161,14 +161,14 @@ The check for whether access is allowed Access requires a valid session - checked using LONCAPA::loncgi::check_cookie_and_load_env(). If so, access is allowed if one of the following is true: - (i) Requestor has LON-CAPA superuser role, or - (ii) Requestor's role is Domain Coordinator in one of the domains - hosted on this server - (iii) Domain configurations for domains hosted on this server include + (i) Requestor's role is LON-CAPA superuser role. + (ii) Requestor has a Domain Coordinator role in the domain of the + requestor ($env{'user.domain'}), regardless of requestor's role. + (iii) Domain configurations for the domain of the current user include the requestor as one of the named users (username:domain) with access to the page. (iv) IP address of requestor is listed in domain configuration list - of allowed machines for any of the domains hosted on this server + of allowed IPs for the domain of the current user. =cut