Tags:
create new tag
, view all tags

Question

How do I exclude access restricted topics from WebSearch and BookView if the current user does not have the rights to access these topics?

On our corporate intranet TWiki site, the users sometimes create personal topics just for their own use (scribbling down ideas, taking notes, you know) and set access restrictions like ALLOWTOPICVIEW = SomeUser to these topics. Although these topics are meant to be private, any user can stumble upon them using WebSearch and see the topic summary. More worse, using the BookView feature, any user can read the whole content (!) of these private topics.

I already searched the whole TWiki.org site for "search access" and "bookview access", but found nothing enlightening.

So, how can the access restrictions be enforced in the WebSearch? Maybe the restricted topics could just be excluded from the search results?

Thanks for any help!
Christoph

Environment

TWiki version: TWikiRelease04x00x04, Hotfix 2
TWiki plugins: DefaultPlugin, EmptyPlugin, InterwikiPlugin, CommentPlugin, EditTablePlugin, HistoryPlugin, PreferencesPlugin, RenderListPlugin, SlideShowPlugin, SmiliesPlugin, SpreadSheetPlugin, TablePlugin
Server OS: SuSE Linux Enterprise Server 9
Web server: Apache 2.0.49
Perl version: 5.8.3
Client OS: MS Windows
Web Browser: IE, Firefox
Categories: Platform, Security, Authorisation, Search

-- ChristophGrothaus - 03 Aug 2006

Answer

ALERT! If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

I just realised that the described behaviour only applies for access restrictions that are set via More topic actions -> Edit topic preference settings. If I set the access restrictions in the text of the topic itself, the topic gets excluded from the search results. If the access restrictions are set in the preference settings, they are ignored by WebSearch.

This needs to be fixed.

-- ChristophGrothaus - 03 Aug 2006

This is a bug in Dakar. It was reported yesterday as Bugs:Item2714 / Requirement, please add any follow up information to that report.

-- SteffenPoulsen - 03 Aug 2006

Edit | Attach | Watch | Print version | History: r3 < r2 < r1 | Backlinks | Raw View | Raw edit | More topic actions
Topic revision: r3 - 2006-08-04 - ChristophGrothaus
 
  • Learn about TWiki  
  • Download TWiki
This site is powered by the TWiki collaboration platform Powered by Perl Hosted by OICcam.com Ideas, requests, problems regarding TWiki? Send feedback. Ask community in the support forum.
Copyright © 1999-2017 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.