SID-00413: how to tighten the security

Status:	Answered	TWiki version:	4.3.1	Perl version:	Perl 5.8.5
Category:	CategorySecurity	Server OS:	CentOS release 5.3 (Final)	Last update:	17 years ago

Hi

How do we customize in such a way when someone goes to our public webhome (eg, http://hostname/twiki/bin/view/) it should prompt us for the Twiki login.

We only want our registered collaborators to view the informations but not any guests as some of the informations are actually confidential

Please advise!

Regards, Padma

-- PadmaTan - 2009-07-14

Discussion and Answer

This can be done with TWikiAccessControl simply by denying TWikiGuest permission to view in the sensitive webs. Be careful about restricting access too much though: TWikiGuest needs to be able to view the login page (or you won't be able to login). Same for the registration page. See UnableToForceAuthentication for more details.

I'm not sure what it does, but you could also look at RequireRegistrationPlugin.

-- SeanCMorgan - 2009-07-14

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.