Index: openacs-4/packages/acs-kernel/acs-kernel.info
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-kernel/acs-kernel.info,v
diff -u -r1.57.2.7 -r1.57.2.8
--- openacs-4/packages/acs-kernel/acs-kernel.info	28 May 2004 17:08:45 -0000	1.57.2.7
+++ openacs-4/packages/acs-kernel/acs-kernel.info	19 Jun 2004 21:06:47 -0000	1.57.2.8
@@ -63,6 +63,7 @@
             <parameter datatype="number"  min_n_values="1"  max_n_values="1"  name="PermissionCacheTimeout"  default="300" description="Number of seconds until the permissions cache times out." section_name="permissions"/>
             <parameter datatype="number"  min_n_values="1"  max_n_values="1"  name="PrivacyControlEnabledP"  default="0" description="Whether we control privacy" section_name="privacy"/>
             <parameter datatype="string"  min_n_values="1"  max_n_values="1"  name="PublisherName"  default="Yourdomain Network, Inc." description="for legal pages, full corporate entity" section_name="system-information"/>
+            <parameter datatype="number"  min_n_values="1"  max_n_values="1"  name="RegisterRestrictEntireServerToRegisteredUsersFilters"  default="0" description="Register filters at startup that will allow each subsite to be restricted to registered users." section_name="security"/>
             <parameter datatype="string"  min_n_values="1"  max_n_values="1"  name="RegisterRestrictToSSLFilters"  default="1" description="Whether to process the RestrictToSSL paths per site node on startup which can be quite slow on a site with many nodes." section_name="security"/>
             <parameter datatype="string"  min_n_values="1"  max_n_values="1"  name="RequireQuestionForPasswordResetP"  default="0" description="(Unsupported) Do we require a question/answer pair to reset a users password?" section_name="security"/>
             <parameter datatype="string"  min_n_values="1"  max_n_values="1"  name="RestrictErrorsToAdminsP"  default="1" description="Whether we show errors to adminstrators only"/>
Index: openacs-4/packages/acs-subsite/acs-subsite.info
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-subsite/acs-subsite.info,v
diff -u -r1.64.2.5 -r1.64.2.6
--- openacs-4/packages/acs-subsite/acs-subsite.info	29 Apr 2004 14:59:09 -0000	1.64.2.5
+++ openacs-4/packages/acs-subsite/acs-subsite.info	19 Jun 2004 21:06:48 -0000	1.64.2.6
@@ -44,6 +44,7 @@
             <parameter datatype="string"  min_n_values="1"  max_n_values="1"  name="RegistrationProvidesRandomPasswordP"  default="0" description="have the system generate a random password instead of the user" section_name="user-login"/>
             <parameter datatype="string"  min_n_values="1"  max_n_values="1"  name="RegistrationRequiresApprovalP"  default="0" description="set this to 1 if user does not go live immediately" section_name="user-login"/>
             <parameter datatype="string"  min_n_values="1"  max_n_values="1"  name="RegistrationRequiresEmailVerificationP"  default="0" description="set this to 1 if the user has to receive and email and come back to the site" section_name="user-login"/>
+            <parameter datatype="number"  min_n_values="1"  max_n_values="1"  name="RestrictEntireServerToRegisteredUsersP"  default="0" description="Do we want to allow only registered users to visit this subsite? (restart required)"/>
             <parameter datatype="string"  min_n_values="1"  max_n_values="1"  name="RestrictToSSL"  default="admin/*" description="URLs we want restricted to SSL. Note that this only takes effect if you have an SSL listener configured on your AOLserver and kernel parameter RegisterRestrictToSSLFilters is set to 1 (its default)."/>
             <parameter datatype="string"  min_n_values="1"  max_n_values="1"  name="ScreenNameP"  default="0" description="Set this to 1 if you want to show screen names instead of real names." section_name="user-info"/>
             <parameter datatype="string"  min_n_values="1"  max_n_values="1"  name="ShowContextBarP"  default="1" description="Should context bars appear on pages?"/>
Index: openacs-4/packages/acs-tcl/tcl/admin-init.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-tcl/tcl/admin-init.tcl,v
diff -u -r1.7 -r1.7.4.1
--- openacs-4/packages/acs-tcl/tcl/admin-init.tcl	1 Nov 2003 08:45:37 -0000	1.7
+++ openacs-4/packages/acs-tcl/tcl/admin-init.tcl	19 Jun 2004 21:06:48 -0000	1.7.4.1
@@ -24,3 +24,14 @@
     
     db_release_unused_handles
 }
+
+# if the kernel param is on, then these filters will be registered.  after that,
+# a subsite param controls whether that subsite is restricted or not
+if { [parameter::get -package_id [ad_acs_kernel_id] -parameter RegisterRestrictEntireServerToRegisteredUsersFilters -default 0]} {
+  db_foreach path_select {} {
+    ns_log Notice "admin-init.tcl:  Registering ad_restrict_entire_server_to_registered_users for ${url}*"
+    ad_register_filter preauth GET "${url}*" ad_restrict_entire_server_to_registered_users
+    ad_register_filter preauth POST "${url}*" ad_restrict_entire_server_to_registered_users
+    ad_register_filter preauth HEAD "${url}*" ad_restrict_entire_server_to_registered_users
+  }
+}