Question
Hi -
I have recently installed twiki and have successfully managed to get most of the things working - including basic authentication. The only problem seems to be with access control. I would like to prevent users from changing certain areas of the site, typically the preferences pages. So I thought I should use the obvious
TWikiAdminGroup. I have listed the contents of this page below:
TWiki Administrator Group
Related topics: TWikiUsers,
TWikiGroups,
TWikiAccessControl
--
PeterThoeny - 28 Oct 2000
--
DhirajMighlani - 17 Mar 2003
However, if I now try to modify this page or any other page with Set ALLOWTOPICCHANGE =
TWikiAdminGroup, I get the error:
Change Access Denied
You do not have permission to change topic
TWikiAdminGroup.
Surprisingly, I can create new webs - so it does recognise that I belong to
TWikiAdminGroup.
Would be extremely grateful if you help me unravel this problem. All system details are listed below. Else, I'll have to persist with shell access to get around things
- TWiki version: 01 Feb 2003
- Perl version: v5.6.1 built for i686-linux
- Web server & version: Apache 2
- Server OS: Linux
- Web browser & version: IE 6
- Client OS: Win 2000
- Skin: GnuSkin
Thanks and regards
--
DhirajMighlani - 17 Mar 2003
Try it again using the default skin. I had severe access control problems (only) when using
GnuSkin.
In my case it sufficed to override the skin for edit by appending the URL with
?skin=default.
--
NilsBluemer - 09 Sep 2003
Answer
You locked yourself out of this topic too with above example. I added
<nop>s to defuse it.
- Is the edit script authenticated? E.g. does your signature show up when you edit a topic?
- Does that signature look exactly like -- Main.DhirajMighlani - 30 Apr 2026
- Is the
manage script authenticated in .htaccess?
--
PeterThoeny - 20 Apr 2003
The problem is that
gnusave is not in the
.htaccess file. You need to add the following before the final "*" entry in
.htaccess
<Files "gnusave">
require valid-user
</Files>
--
TamaraTemple - 20 Dec 2003