Question

I moved over to using the new TWikiVM on Debian. I recently upgraded to TWiki 4 and have a few questions re: the security files.

There's a twiki_httpd.conf file. THis is where I set Deny from all for the /twiki folder, modify the options for /bin to only allow from certain IP addresses, etc. There's also a bunch of

<Directory "/home/httpd/twiki/data">
   deny from all
</Directory>

I assume that's all I need in this file.

In the /bin folder I enabled the .htaccess file for authentication - and this is all pretty straightforward, but in the

<FilesMatch "configure.*">
       #require group TWikiAdminGroup
</FilesMatch>

I would like to name a TWiki group instead of a single user. Is that possible?

Thanks Steven

Environment

-- StevenColbert - 26 Jul 2006

Answer

If you answer a question - or have a question you asked answered by someone - please remember to edit the page and set the status to answered. The status is in a drop-down list below the edit box.

The FilesMatch section uses the basic Apache authentication to control access. You cannot use the groups defined in twiki.

But you can use

Require user kenneth steven steffen peter

to include 4 people. I am sure you only want a small group of people to have access to configure.

-- KennethLavrsen - 26 Jul 2006

OK - that makes sense... and yes of course I only want me to have the rights to configure, but wanted to be scaleable for future use. Knowing this is help - and like the previous answer, I really appreciate your help.

-- StevenColbert - 26 Jul 2006