Question

I have successfully enabled authentication and access control. I attempted to limit view access to the Main and TWiki webs using the following WebPreferences statement:

• ALLOWWEBVIEW = TWikiUsersGroup, TWikiAdminGroup

It worked fine but when I attempted to register a new users, the TWiki.TWikiUsers topic was wiped out which locked everyone out of TWiki.

I was logged in as TWikiAdmin, which is a member of TWikiAdmin.Group. It appears that the 'register' CGI script failed while attempting to access the TWiki.NewUserTemplate and the TWiki.TWikiUsers topics. I can work around the problem if I add the new user's TWiki name to the TWikiUsersGroup first, then register the new user. It appears that TWiki is evaluating the view request for the TWiki.TWikiUsers topic using the new user, not the user that I am logged in as. In other words, NewUser doesn't have view access to TWiki.TWikiUsers unless I add NewUser to TWikiUsersGroup before registering NewUser.

Environment

-- DanGrattan - 16 Apr 2004

Answer