COmanage Developers List

Author: benno
Date: 2013-08-31 07:37:18 -0400 (Sat, 31 Aug 2013)
New Revision: 582

Modified:
   registry/trunk/app/Controller/CoPetitionsController.php
Log:
Fix authentication sequencing for enrollment flows (CO-675)

Modified: registry/trunk/app/Controller/CoPetitionsController.php
===================================================================
--- registry/trunk/app/Controller/CoPetitionsController.php     2013-08-29 
00:07:34 UTC (rev 581)
+++ registry/trunk/app/Controller/CoPetitionsController.php     2013-08-31 
11:37:18 UTC (rev 582)
@@ -167,9 +167,12 @@
       if(empty($ef)) {
         $this->Session->setFlash(_txt('er.coef.unk'), '', array(), 'error');
       } elseif(isset($ef['CoEnrollmentFlow']['authz_level'])
-               && $ef['CoEnrollmentFlow']['authz_level'] == 
EnrollmentAuthzEnum::None) {
+               && $ef['CoEnrollmentFlow']['authz_level'] == 
EnrollmentAuthzEnum::None
+               && isset($ef['CoEnrollmentFlow']['require_authn'])
+               && !$ef['CoEnrollmentFlow']['require_authn']) {
         // If this enrollment flow allows unauthenticated enrollments, drop 
the auth
-        // requirement. Only do this for add for the moment, since we don't 
currently
+        // requirement, but only if authentication is not required for the 
flow.
+        // Only do this for add for the moment, since we don't currently
         // know what it means for an unauthenticated enrollment to be edited 
without
         // authentication.