Question

hi there..

We are using tiwki 2004. Now every time user creates his web page, it add on to a huge .acl file that we already are maintaining. Also if user want to modify the restrictions on a page, they have to contact the admin group. I would like to know if it is possible that we could let the user to manage the access to their own pages(pages that they have created) following below criteria.

1. Authentication v's Access Control

Authentication will still have to be done against the our corporate server.

However, the access control should move to the pages themselves. That is, may be we should just be able to add special access-control markup to the pages when editing them.

May be we can stop using .acl file.

To do this, do we need a newer version of TWiki. I don't know for sure. If we need than, how about migrating from TWIki 01 Sep 2004 to the current stable version available from http://TWiki.org.

I have read that upgrading TWiki is not always easy.

Please let me know what should i do ASAP.

Thanks and Regards Sapin

Hello,

First of all I am sorry about the old question as it is missing some information

Here are few of my doubts..

→ We only have to add an entry to the web server .acl file when a user wants a file restricted. By default all pages are open until someone requests a restriction.

Our .acl file has nothing to do with TWiki. It's part of the web server configuration.

We still need to authenticate against the corporate LDAP server [not part of TWiki] but use TWiki's access control features (instead of the web server .acl file).

In the forum - don't confuse 'ACL' [TWiki's access control list] with our .acl - which is a separate thing entirely.

So, finally my question is:

"For Twiki version 2004, can we continue to authenticate against our corporate LDAP server - but use Twiki's access control directives, like ALLOWTOPICVIEW and ALLOWTOPICCHANGE etc. - and remove our web server .acl file? If so, how?"

Thanks and Regards, Sapin

Environment

-- SapinAmin - 14 Jul 2008

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

Sorry, closing this question after more than 30 days of inactivity. Feel free to re-open if needed.

-- PeterThoeny - 02 Sep 2008