Question

A group of users has requested to remove all authentication checks on their web, so that clicking on 'edit' immediately edits, assuming TWikiGuest (or another) as the editor.

Is this possible?

Environment

-- JosMaccabiani - 15 May 2006

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

You don't say what login manager you are using (Apache or Template). But in general, I don't think this is possible anyway.

-- CrawfordCurrie - 16 May 2006

Of corse you could simply not authenticate any of the TWiki scripts, e.g. changes are always done by TWikiGuest. But this means that any topic can be changed by anyone, including system topics such as TWikiPreferences, which is bad from a security perspective. As a hack you could change the file permissions of the system topics so that they cannot be saved (user gets an ugly error message.)

You could create a second TWiki installation without auth, and mount the TWiki and Main web (from the primary TWiki) as read-only file systems, and the open web as read-write.

-- PeterThoeny - 16 May 2006

Crawford, I'm using Template.

Peter, thanks, I know it's a security issue, but the web only uses some twiki apps, so no unintentional access to the preferences topics, and i trust my co-workers...

that said, i think they'll just have to cope with remembering their password. I'm not going through all that trouble for 10 people!

Thanks for the replies, both of you.

-- JosMaccabiani - 16 May 2006

If it is just about remembering a password, how about a guest / guest account?

-- PeterThoeny - 16 May 2006