SID-01946: Restricting user to change another user profile

Status:	Answered	TWiki version:	6.0.0	Perl version:	5 version 18
Category:	CategorySecurity	Server OS:	Ubunto 14.04	Last update:	10 years ago

I only want administrators in the admin group to be able to edit users profile

And I want to restrict all other users from editing another user profiles

I am not sure how to do this

Please support

-- Yasser Amir - 2014-07-02

Discussion and Answer

The full story is in TWiki.TWikiAccessControl, but since this is a looong story, here's the shortcut:

1. Log in as an administrator (or a member of your TWikiAdminGroup) of your TWiki.
2. Edit the topic Main.WebPreferences, There's a section "Access Control and Security".
3. In this section, there's a line with ALLOWWEBCHANGE. At the end of this line add one space and TWikiAdminGroup, TWikiRegistrationAgent.
4. Save.

Now only administrators can edit user profiles, and registration of new users is still possible.

Probably you want each user to be able to edit his own profile. In that case, every user profile needs a setting ALLOWTOPICCHANGE = <my_wiki_name>, with <my_wiki_name> as this user's wiki name. Unfortunately this needs to be done for every existing user

For users who register after the change of ALLOWWEBCHANGE you can get this setting automatically:

1. Log in as an administrator (or a member of your TWikiAdminGroup).
2. Edit the topic Main.NewUserTemplate,
3. Add a setting Set ALLOWTOPICCHANGE = %WIKIUSERNAME%.
4. Save.

I hope this still does the trick, I've done the same thing years ago and a lot has changed since then...

-- Harald Jörg - 2014-07-02

Although tempting, I do not recommend locking down user profile pages. Read TWikiAccessControl

-- Peter Thoeny - 2014-07-02

Dear Harald

Thanks a lot for the steps , I managed to restrict users from editing another user's profile

However for the automated step for users who register after the change ALLOWWEBCHANGE , I cant find NewUserTemplate to edit it's preference and add the setting

Dear Peter

Thanks for the recommendation much appreciated

-- Yasser Amir - 2014-07-03

Closing this question after more than 30 days of inactivity. Feel free to reopen if needed. Consider engaging one of the TWiki consultants if you need timely help. We invite you to get involved with the community, it is more likely you get community support if you support the open source project!

-- Peter Thoeny - 2015-12-03

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.