Question

In my office, we'd like to set DENYTOPICVIEW for just one single page, not a whole web. Of course this is a very rare case, but it would be a tremendous feature if we could make it work. I'm following the guidelines given in TWikiAccessControl#Restricting_Read_Access.

I've tried the usual format (6 spaces + * + space) set SETTING without any luck. I've tried both DENYTOPICVIEW = TorbenGB to lock myself out, and ALLOWTOPICVIEW = TWikiAdminGroup to lock out everybody but that group. Either way, I could still see the page.

Any suggestions?

Notes from the documentation

These are some relevant points from TWikiAccessControl#Restricting_Read_Access:

• Read access restriction only works if the view script is authenticated.
  • We have this in place already.
• It is not recommended to restrict view access to individual topics since all content is searchable within a web.
  • Nevertheless, this is exactly what we're trying to do.
• The view restriction is not suitable for very sensitive content since there is a way to circumvent the read access restriction.
  • We know it's not bulletproof but it's close enough for our needs.

System information

• TWiki version: 01 December 2001
• Perl version: 5.6.1
• Web server & version: Apache version the-one-before-2.0
• Server OS: Linux Red Hat 7
• Web browser & version: IE6
• Client OS: Win NT4 SP3

-- TorbenGB - 28 Feb 2003

Answer

This should work.

• Do you use the correct capitalization, e.g * Set ALLOWTOPICVIEW = ....
  • Yes. I've made a test page identical to this one. [ TorbenGB ]
• Does the allow topic change work?
  • Yes. We already use that elsewhere in our TWiki. [ TorbenGB ]
• Restart the browser to log in as a different user
  • Will try this, thank you. [ TorbenGB ]

-- PeterThoeny - 01 Mar 2003
-- TorbenGB - 03 Mar 2003

Now I made it work! It turned out that the Set part of the line is case sensitive and must be capital "S" + lowercase "et" in order to work.

-- TorbenGB - 03 Mar 2003