14 Dec
2004
14 Dec
'04
11:02 a.m.
Another question: how do I create a 'private space' on an otherwise
publicly accessible wiki? I want to set up a folder that only logged in
users can view, but not the anonymous user.
(I've added this as a question to the FAQ btw:
http://kilana.unibe.ch/SmallWiki/FAQ#Q14)
14 Dec
14 Dec
12:08 p.m.
How do I create a page/folder that can only be viewed by a specific set
of users (in a wiki that is otherwise publicly accessible)?
From the SmallWiki evaluate:
(server root at: 'Top Secret Folder')
roles: (OrderedCollection
" a role without any permissions "
with: (BasicRole name: 'anonymous'))
From now on all people belonging to the anonymous role have no
permission, like the anonymous user. To access the page you have to
belong to a different role, e.g. having the admin role.
Hope this helps,
Lukas
--
Lukas Renggli
http://www.lukas-renggli.ch
15 Dec
15 Dec
1:54 p.m.
Thanks for the hint Lukas, I was able to create a 'private page' now.
Unfortunately I still have a problem with it: changes to the private
pages still wind up in the RSS feed. Does the RSS feed generation use a
different role from 'anonymous' or does it ignore the permissions
system altogether? How can this be fixed (apart from simply disabling
the RSS feeds preferably)?
How do I create a page/folder that can only be viewed
by a specific
set of users (in a wiki that is otherwise publicly accessible)?
From the SmallWiki evaluate:
(server root at: 'Top Secret Folder')
roles: (OrderedCollection
" a role without any permissions "
with: (BasicRole name: 'anonymous'))
From now on all people belonging to the anonymous role have no
permission, like the anonymous user. To access the page you have to
belong to a different role, e.g. having the admin role.
Hope this helps,
Lukas
--
Lukas Renggli
http://www.lukas-renggli.ch
2:35 p.m.
Thanks for the hint Lukas, I was able to create a
'private page' now.
Unfortunately I still have a problem with it: changes to the private
pages still wind up in the RSS feed. Does the RSS feed generation use
a different role from 'anonymous' or does it ignore the permissions
system altogether? How can this be fixed (apart from simply disabling
the RSS feeds preferably)?
Yes, this is a known problem: the security for the object to be listed
isn't checked when generating the history or the RSS feed. The given
security model makes such checks difficult, but I think it should be
possible to add. Have a look at the action creating the RSS feed.
SmallWiki 2 will have a more elaborate security model, so that such
check will be simpler.
Cheers,
Lukas
--
Lukas Renggli
http://www.lukas-renggli.ch
7311
days inactive
7312
days old
3 comments
2 participants
participants (2)
-
Kris Gybels -
Lukas Renggli