Question

Hello, I followed all the documents on user authentication and I think I am missing something. I created a new group (GeneralGroup) and added myself in the group. I created another topic and set ALLOWTOPICVIEW = GeneralGroup. But I cannot see that topic unless I add myself to the ALLOWTOPICVIEW. I am not restricting users at the Web Level. I would like to create topics that can only be seen by certain users.

Environment

-- PhaniYenugu - 29 May 2008

Answer

If you answer a question - or have a question you asked answered by someone - please remember to edit the page and set the status to answered. The status is in a drop-down list below the edit box.

I suspect this is related to your other problem, LdapLoginNameNotAWikiName. Your WikiName is in the authorized group, but it isn't mapping your login name to that WikiName properly.

In other words, if you solve the other problem, this one will probably go away on its own.

In the meantime, to test this you could create additional mappings in TWikiUsers, like so:

• PhaniYenugu - Phani.Yenugu
• PhaniYenugu - phani.yenugu

-- SeanCMorgan - 29 May 2008

Oh. Thanks Sean. I really appreciate your time.

-- PhaniYenugu - 29 May 2008

I added your suggestion in TWikiUsers and it still did not help ?

My GeneralGroup.txt:
GeneralGroup

• Member list (comma-separated list):
  • Set GROUP = Main.PhaniYenugu
• Persons/group who can change the list:
  • Set ALLOWTOPICVIEW = Main.GeneralGroup
  • Set ALLOWTOPICCHANGE = TWikiAdminGroup

My GeneralChat.txt:
Testing the General Chat Feature of SWiki.

• Set ALLOWTOPICVIEW = TWikiAdmin, Main.GeneralGroup
• Set ALLOWTOPICCHANGE = TWikiAdmin, Main.GeneralGroup

If I add myself to the GeneralChat topic then I am able to view. When my name is in the Group List, I should be able to view as long as the group has access to view the topic right ?

-- PhaniYenugu - 29 May 2008

I cannot even access the GeneralGroup topic when I set as above, unless I exclusively put Set ALLOWTOPICVIEW = PhaniYenugu. Anyone Please help !!!!

-- PhaniYenugu - 30 May 2008

I did debug on Access.pm and noticed this....

[Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] OK, permitted, referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] ALLOW: , referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] DENY: , referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] Check VIEW access Phani_46Yenugu to TWikiWebCss, referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] OK, permitted, referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] Check VIEW access Phani_46Yenugu to TWikiWebTopicActions, referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] OK, permitted, referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] Check VIEW access Phani_46Yenugu to TWikiWebSideBar, referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] OK, permitted, referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] Check VIEW access Phani_46Yenugu to WebLinks, referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] OK, permitted, referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] ALLOW: , referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] DENY: , referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] Check VIEW access Phani_46Yenugu to ExternalLinks, referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] OK, permitted, referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] Check change access PhaniYenugu to WebPreferences, referer: http://wiki.web.com/twiki/bin/view/Wiki/General [Fri May 30 12:42:26 2008] [error] [client 10.80.0.196] access not allowed on topic (TWikiAdminGroup), referer: http://wiki.web.com/twiki/bin/view/Wiki/General

Looks like there are still issues with Ldap Login. My USERNAME is Phani_46Yenugu or phani_46yenugu depending how I login. My USERNAME is phani_46yenugu(or Phani_46Yenugu), PhaniYenugu

-- PhaniYenugu - 30 May 2008

I added TWikiAdminUser, Main.Phani_46Yenugu, PhaniYenugu, Main.phani_46yenugu to my GeneralGroup and now it works.

-- PhaniYenugu - 30 May 2008

I added PhaniYenugu,phani_46yenugu,Phani_46Yenugu and it works now. I am going to keep it like that until the new LdapContrib comes next week which hopefully should fix the issue.

-- PhaniYenugu - 30 May 2008

When I create a new topic using a Parent Topic the access control is not being passed to the child topic. I want to restrict based on the GeneralGroup topic to all the topics created under this parent. How can I do this ?

-- PhaniYenugu - 30 May 2008

Sorry, closing this after more than 30 days of inactivity. Please feel free to re-open if needed.

-- PeterThoeny - 02 Aug 2008