Question

Still confused... Have my main web set to require login to edit, using .htaccess. But we have sensitive data to store which I wanted no access to at all except for named users. So I created a whole new Web. Used it's Webprefs to set it so only (listed) users could access it... and now I'm asked for a username before I can even see the main web. The main web Webprefs nor Twikiprefs page shows no sign of this.

Also one of the three user names I listed in Webprefs is showing as a new-link

# Set DENYWEBVIEW =
# Set ALLOWWEBVIEW = ChrisComley?,HughAinsley,RobertNeuschul
# Set DENYWEBCHANGE =
# Set ALLOWWEBCHANGE = ChrisComley?,HughAinsley,RobertNeuschul
# Set DENYWEBRENAME =
# Set ALLOWWEBRENAME = ChrisComley?,HughAinsley,RobertNeuschul

Environment

-- ChrisComley - 09 Sep 2005

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

The Main web's Main has a SiteMap. If the restricted web is listed in the sitemap, TWiki wants to know who the user is before showing the description of the restricted web. In your restricted web's WebPreferences you need to set SITEMAPLIST to an empty value.

On the question mark links, make sure to write Main.UserName. It is more convenient to create a new group in the Main web and set the access restriction to that group in the restricted web's WebPreferences. That way you have just one list to maintain. See TWikiGroups.

-- PeterThoeny - 09 Sep 2005