Question:
I cannot get topic restrictions to work. I have read
TWikiAccessControl many times and followed the spec religiously but still others can edit my topic-controlled pages. Here is what is defined in my topic:
-
- example: Set DENYTOPICCHANGE =
- example: Set ALLOWTOPICCHANGE = AnyUser
I am using .htaccess authentication to define the username. Curiously, setting ALLOWWEBCHANGE in
WebPreferences to a group does indeed lock people out if they are not in the defined group. Any ideas?
Could it have anything to do with the following variables not being set throughout the user session?
- ENV->REMOTE_USER:
- % USERNAME %: guest
Note: I've noticed that the USERNAME value generally doesn't work when the user is just viewing topics, but does work when editing. For example, when viewing the topic the USERNAME value would be null, and once I click 'edit' and 'preview' the USERNAME would show the name defined by .htaccess authentication but once the topic is published, the value is lost again.
--
RickOliver - 01 Nov 2001
Also It I want to allow a sigle user to change a topic, as I understand it I first
set DENYTOPICCHANGE = ALL USERS
then I
set ALLOWTOPICCHANGE =
KentDeines
How do I say all users? Is there an
AllUsersGroup?
--
KentDeines - 10 Nov 2003
I think that when there is nothing to the right of the = it means all.
I think the solution to Rick's problem is to change the FINALPREFERENCES variable to allow the ALLOW/DENY variables to be changed on the individual topics.
--
KentDeines - 10 Nov 2003
Answer:
(Not an answer, but moved from the TWiki.TWiki web)
@
KentDeines : Not sure about that AllUsersGroup but... what about just listing groups? kind of
set ALLOWTOPICCHANGE = Main.TWikiGroup1, Main.TWikiGroup2, Main.TWikiUser1, ...
--
FranGarcia - 05 Jul 2007