Removed eppn secret check for getting eppns for sids without secret because...

Removed eppn secret check for getting eppns for sids without secret because there is nothing secret about eppns if we have the sid.

info.textgrid.middleware.tgauth.rbac/conf-dist/rbacSoap.conf

 <configuration>
 
+  <!-- Secret for TG-crud onla methods (tgextra_crud) -->
   <section name="crud">
     <var name="secret">XXXXXXXXXX</var>
   </section>
 
+  <!-- WebAuth secret -->
   <section name="webAuth">
     <var name="secret">XXXXXXXXXXXXXX</var>
   </section>
 
+  <!-- Secret for getEPPN method (now deprecated) *fu* 20150113 -->
   <section name="SIDcheck">
     <var name="secret">XXXXXXXXXXXXX</var>
   </section>

info.textgrid.middleware.tgauth.rbac/rbacSoap/TgExtraCrud.class.php

@@ -606,12 +606,14 @@ class TgExtraCrud {
 
     $result = new StdClass();  // The return-result
 
-    if ($inRequest->secret !== $this->config->getValue( "SIDcheck", "secret" ) ) { 
-      return new SoapFault( "authenticationFault",
-                            $this->config->getValue( "errorCode", "INSUFFICIENT_ACCESS" ),
-                            get_class( $this ),
-		            $this->config->getValue( "errorDescription", "INSUFFICIENT_ACCESS" ) );
-    }
+    // Secret is not needed for getEPPN anymore, it is contained in any metadata anyway.
+    // So we do not check it! *fu* 20150113
+    // if ($inRequest->secret !== $this->config->getValue( "SIDcheck", "secret" ) ) { 
+    //   return new SoapFault( "authenticationFault",
+    //                        $this->config->getValue( "errorCode", "INSUFFICIENT_ACCESS" ),
+    //                        get_class( $this ),
+    //                        $this->config->getValue( "errorDescription", "INSUFFICIENT_ACCESS" ) );
+    // }
 
     try {
       $result->eppn = $this->rbac->sessionUser( $inRequest->auth );
@@ -621,6 +623,7 @@ class TgExtraCrud {
                             get_class( $this ),
                             $this->config->getValue( "errorDescription", "INSUFFICIENT_ACCESS" ) );
     }
+
     return $result;
   }