Alexander Solodukhin wrote:
Thank you for help. I try to do as you say and put this to authorize section after preprocess:
preprocess
# allow hotspot users only if (SQL-Group != 'Spot') {
That won't work... the SQL-Group attribute is a "callback" attribute. i.e. Using it results in a call to the SQL module, which then does the comparison itself. And... it ignores the operator '!='. The operator is always '=='. This is because the SQL-Group functionality goes way back to version 0.2, and isn't integrated with the newer "unlang" feature. You could send a patch to integrate it with unlang, or do: if (! (SQL-Group == 'Spot')) { reject } That should work. It lets the SQL-Group code use '==', and then uses the newer expression parser to do the "NOT in the group" checking. Alan DeKok.