Can we re-order the authorization queries in the SQL module?

[Alan DeKok]

On Nov 22, 2023, at 12:57 AM, James Fan <polysorb at gmail.com> wrote:
> 
> We have a case that needs to prioritize the group reply attributes more
> than the user reply attributes in the same attribute. However, I found a
> fixed order for the authorization queries in the source code as below.
> radcheck -> radreply -> radgroupcheck -> radgroupreply
> If I change the orders in queries.conf, the query order is not changed
> while authorizing.

  Yes... the order of the queries is controlled by the source code, not by their location in the files.

> So I wonder if we can re-order the authorization queries by any
> configuration to make higher priority for the group reply? Thanks.

  Why not use the operators?  Make the group replies use ":=", and it will over-ride whatever is set in the user profile.

  Or, describe the problem in more detail.  What would you like to do, and why does the current behavior not work?

  Don't say "I need to change the order of the queries".  That's a solution.  Describe what you want the server to do at a high level.

  We can then offer a solution which doesn't involve changing query order or source code.

  i.e. "I need to make my car waterproof" is a solution.  The real problem might be "I want to fill the pool with water".

  The real solution is a garden hose, not transporting water in the car.  The same thing applies here.

  Alan DeKok.