Question

Hi -

I have recently installed twiki and have successfully managed to get most of the things working - including basic authentication. The only problem seems to be with access control. I would like to prevent users from changing certain areas of the site, typically the preferences pages. So I thought I should use the obvious TWikiAdminGroup. I have listed the contents of this page below:

TWiki Administrator Group

• Set GROUP = DhirajMighlani
• Set ALLOWTOPICCHANGE = TWikiAdminGroup

Related topics: TWikiUsers, TWikiGroups, TWikiAccessControl

-- PeterThoeny - 28 Oct 2000
-- DhirajMighlani - 17 Mar 2003

However, if I now try to modify this page or any other page with Set ALLOWTOPICCHANGE = TWikiAdminGroup, I get the error:

Change Access Denied You do not have permission to change topic TWikiAdminGroup.

Surprisingly, I can create new webs - so it does recognise that I belong to TWikiAdminGroup.

Would be extremely grateful if you help me unravel this problem. All system details are listed below. Else, I'll have to persist with shell access to get around things

• TWiki version: 01 Feb 2003
• Perl version: v5.6.1 built for i686-linux
• Web server & version: Apache 2
• Server OS: Linux
• Web browser & version: IE 6
• Client OS: Win 2000
• Skin: GnuSkin

Thanks and regards

-- DhirajMighlani - 17 Mar 2003

Try it again using the default skin. I had severe access control problems (only) when using GnuSkin. In my case it sufficed to override the skin for edit by appending the URL with ?skin=default.

-- NilsBluemer - 09 Sep 2003

Answer

You locked yourself out of this topic too with above example. I added <nop>s to defuse it.

• Is the edit script authenticated? E.g. does your signature show up when you edit a topic?
• Does that signature look exactly like -- Main.DhirajMighlani - 10 Feb 2012
• Is the manage script authenticated in .htaccess?

-- PeterThoeny - 20 Apr 2003

The problem is that gnusave is not in the .htaccess file. You need to add the following before the final "*" entry in .htaccess

   <Files "gnusave">
         require valid-user
   </Files>

-- TamaraTemple - 20 Dec 2003