Question

How do I force the authentication of a plugin ... like TWikiDraw ?

I have a Project "intranet" setup using TWiki. I have authentication setup for this TWiki and this works great for folks wanting to Edit pages. Unfortunately, I've found that the TWikiDrawPlugin will still update a drawing as TWikiGuest on any page a drawing exists.

What I REALLY want is the following:

1. Forced login for EVERYTHING. TWikiGuest (or whatever) gets true read-only access to TWiki. If they click a plugin that updates, they are denied or whatever. Yeah, I know ... this goes against the TWiki "culture" ...
2. Folks in groups (currently I have TWikiAdminGroup setup for write access) can update TWiki pages.

• TWiki version: 01 Dec 2001
• Web server: Apache 2.0.43
• Server OS: Solaris 8
• Web browser: Any
• Client OS: Any

Nevermind ... I looked at bit more closely at this. Apparently, authentication does effect the saving of the .draw and .gif files. TWikiGuest can bring up an image and even edit it. But when TWikiGuest does a "Save and Exit" the save process fails to save both the .draw and .gif images. Not sure why though. This is what I wanted though.

-- SeanONeill - 19 Nov 2002

Answer

Sounds like you answered your own question - my kind of question! Ideally TWikiDraw would authenticate the user when they start the modification process, just as the edit script authenticates rather than the save one. Not sure what would be involved in this - presumably a separate server-side script on editing a drawing.

-- RichardDonkin - 19 Nov 2002

The TWikiDrawPlugin does authenticate users correctly if the save script is authenticated. Check the .htaccess in twiki/bin settings if not.

Richard's idea of authenticating at edit time sounds reasonable. This can be done for example like this:

• copy the oops script to oopsauth (or better create a symbolic link)
• authenticate oopsauth in .htaccess
• change the Plugin to call oopsauth instead of oops when the user clicks on the drawing.

-- PeterThoeny - 20 Nov 2002

Sweet !!!! I'll give it a try

-- SeanONeill - 20 Nov 2002