User-List Control for PAM Authentication

[huangyxi]

In the current implementation, PAM authentication in wsgidav only checks if a user exists on the OS. The new patch introduces a user-list control feature, allowing more granular management of which users can access the WebDAV service.

Key Features

1. deny_users Option:
   A list[str] that explicitly denies login access to any users listed. This option has the highest priority. If a user is listed in deny_users, they will be blocked from logging in, regardless of other settings.

2. allow_users Option:
   Can be set as a str or list[str], determining which users are allowed to log in:

   • "all" (default): All users on the OS are permitted.
   • "current": Only the user running the wsgidav program can log in.
   • A specific list of users can also be provided to explicitly allow access.

Compatibility

This user-list control does not change the default behavior, which allows all OS users to log in.

[mar10]

Thanks for the contribution!
Please also add a line to the changelog and some info here user_guide_configure.rst.

[mar10]

Thanks for contributing a great new feature!