run-server should permit defining a user in other modes
mhucka opened this issue · 1 comments
Currently, run-server
only supports setting a REMOTE_USER
in debug mode. However, during development, you really do want to be able to set the user to test adapter.wsgi
too, but the latter is only used when debug mode is not in effect (i.e., when -m
is either verbose
or normal
).
Now, it does turn out to be possible to set REMOTE_USER
using --setenv
when invoking mod_wsgi-express
. However, this would weaken the security intentions; we originally wanted to have 2 things preventing someone from overriding security (use debug mode and use the -u
flag), and so disconnecting -u
from the mode would allow someone to use -u
in any run mode. OTOH, we tell people not to use run-server
in production, so maybe this doesn't matter?
This is done in the latest dev version. Closing it.