Roundup works nicely with Apache's "AuthType Basic" passing through the
REMOTE_USER to roundup.  Our web interface is not anonymously available;
users must have a LDAP account.  Under this setup we prefer to have the
Login box and Logout link not appear at all as they just confuse users.

Currently I edit html/page.html and comment out the Login form and
Logout link.  It would be more elegant and upgrade-friendly if this
could be done via a flag in config.ini rather than editing the html
file.  It's easy enough to edit the html file, but others might find the
feature useful too.

Hi Daniel,
thanks for your suggestion!

Ideally you or someone else creates a patch for this behaviour.
I guess this would lead to some conditional in the page template.
It is hard to guess how many people are interested in having this 
feature as option. If we believe it is a significant fraction,
it certainly makes sense to add it.

I don't think we need a new flag in config.ini, we should just be able
to reuse the WEB_HTTP_AUTH configuration option right?

It should be possible to have local as well as http auth users. So this 
probably needs a separate setting, or http_auth is modified to yes, no, 
both (implying local auth and http auth).

But given other auth methods (openid, github)  could be supported,
I wonder if this should just be an edit if page.html and documented
in wiki/customizing.html.