SID-00463: Security permissions on Main page

Status:	Answered	TWiki version:	4.3.1	Perl version:	ActivePerl 5.10.0 Build 1005
Category:	CategoryAccessControl	Server OS:	Windows 2003	Last update:	16 years ago

I am having problem trying to lock down my Main page to stop new users from destroying the format. When I view SitePermissions or TWikiAccessControl I see that their is a blank line in the table for the Main web page. From what I have read this means that there are no permissions set on the Main page.

Although when I view WebPreferences for the Main page I see that the group TWikiAdminGroup is specified for the ALLOWTOPICCHANGE.

Set ALLOWTOPICCHANGE = TWikiAdminGroup

When I create a test user they are able to change the Main page even though they are not a member of the TWikiAdminGroup.

How do I lock down the Main page?

Thanks

-- MichaelKerr - 2009-08-05

Discussion and Answer

I am not clear if you want to lock down just the WebHome page in the Main web, or the whole Main web.

1. Lock down just Main.WQebHome page

Use this bullet, optionally hidden from users in HTML comments:

<--    * Set ALLOWTOPICCHANGE = Main.TWikiAdminGroup --> 

Note that this needs to be a proper bullet; if you edit in raw more, prefix the asterisk with 3 or 6 spaces.

2. Lock down the whole Main web

In the WebPreferences of the Main web, add this to the existing ALLOWWEBCHANGE bullet:

   * Set ALLOWWEBCHANGE = Main.TWikiAdminGroup, Main.TWikiRegistrationAgent 

TWikiRegistrationAgent needs to be there so that registrations can work. If the set is escaped such as #Set, remove the hash sign. Again, the setting needs to be a proper bullet; if you edit in raw more, prefix the asterisk with 3 or 6 spaces.

See details inTWiki.TWikiAccessControls.

-- PeterThoeny - 2009-08-06

Thanks that worked. I had tried entering Main.Myname but it didn't seem to work.

-- MichaelKerr - 2009-08-06

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.