Tags:
create new tag
, view all tags

Question

I noticed that when I have a topic locked down (set webview and change) that I get a 'view denied for topic' when trying to view attachments on that topic.

To make matters interesting, I am in the TWikiAdminGroup, and I was under the impression an admin would never get a view denied.

Is this a bug or a byproduct of a bug fix (I noticed a few bugs for twikiview that were hotfixed)?

Thanks for any information.

Environment

TWiki version: TWikiRelease04x00x04
TWiki plugins: DefaultPlugin, EmptyPlugin, InterwikiPlugin
Server OS: Fedora Core linux
Web server: Apache
Perl version: 5.8
Client OS: Mac
Web Browser: Firefox 1.5
Categories:  

-- EricHanson - 12 Oct 2006

Answer

ALERT! If you answer a question - or have a question you asked answered by someone - please remember to edit the page and set the status to answered. The status is in a drop-down list below the edit box.

Attachments accessed through viewfile are protected same as the topic they are attached to, so you should expect the same protections to be applied. However if you are admin, it ought to let you through. Can you confirm that

  1. a user (not an admin) who is individually denied access to the topic is unable to view attachment through viewfile, and
  2. a user (not admin) who is individually permitted access to the topic is able to view attachments through viewfile, and
  3. that a user definitely in TWikiAdminGroup who is individually denied access to the topic is unable to view attachments though viewfile?
If so, you may have found a bug.....

-- CrawfordCurrie - 13 Oct 2006

Sorry, closing after more than 30 days...

-- PeterThoeny - 28 Nov 2006

 
Change status to:
Topic revision: r3 - 2006-11-28 - PeterThoeny
 
Twitter Delicious Facebook Digg Google Bookmarks E-mail LinkedIn Reddit StumbleUpon    
  • Download TWiki
TWiki logo Powered by Perl Hosted by OICcam.com Ideas, requests, problems regarding TWiki? Send feedback. Ask community in the support forum.
Copyright © 1999-2012 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.