Question

I have a Twiki installation where most webs are set so that editing requires username/password authentication but viewing is open.

I have a requirement to lock down one particular web only e.g. by using ALLOWWEBVIEW. I am slightly alarmed that the docs say that this is not very secure.

Is there more information on the nature of this insecurity and is there any way to achieve high security on this one web without having to lock down the whole Twiki?

I have already got Apache to force SSL on that particular web using a redirect, in case that was the problem.

Environment

-- SimonBlandford - 22 Apr 2004

Answer

With the TWikiRelease01Feb2003 you could include a protected topic into an unprotected topic without authentication (assuming you know the name of the topic to include). This has been fixed. You can upgrade to a recent TWikiBetaRelease, they are usually stable and can be used in a production environment.

-- PeterThoeny - 24 Apr 2004