Editing Miscellaneous Config Options (section)

== A ==
* '''access_logger_func''' - Defines a function that is called every time a documents is downloaded or abstract/summary page is viewed (i.e. an access record is created).  This is used by recent versions of IRStats2, so it can process stats from a file-based access records rather than the database, which is more efficient if the <code>access</code> database table is large (10 million+ records).
* '''access_table_logger_disabled''' - Whether access records should still be saved to the database.  (Without a setting database will continue to store access records).
* '''allow_duplicate_usernames''' - Whether the validation of <code>user</code> metadata should check for duplicate usernames.  (Without a setting user metadata validation will fail if there are duplicate usernames.  This should only ever be set to <code>1</code> temporarily, if username changes are required that may briefly lead to duplicates).
* '''allow_uploaded_doc_js''' - A malevolent user could deliberately upload malicious JavaScript to perform a clickjacking or similar attack against logged in users.  Should uploaded JavaScript only be returned with a Content Security Policy (CSP) to prevent it from being run on the client web browser.  (Without a setting CSP to prevent JavaScript running on the client is enabled).
* '''<font style="color: red;">auth_basic</font>''' - <font style="color: red;">Legacy configuration for specifying basic rather than cookie-based user authentication.</font>