Security Plugin

The SecurityPlugin implements a TWikiVariable which will show whether the page being viewed needs authentication or not. Authorization is another issue. Hopefully this is easier and more intuitive than telling users to check whether the current URL has view or viewauth in it.

The Plugin is quite simple, it uses TWiki::Func::isGuest to check if the page is authenticated or not. This relies on the fact that URL linking to other topics use the view CGI and authenticated pages are referred from the view CGI to the viewauth CGI (if installed). Of course one could make a page appear authenticated by adding auth to the URL (or linking to a URL with viewauth) but this won't happen on the next page if the user acts normally and clicks on the links.

Syntax Rules

• Place a %SECURITY% variable in any page (Or WebLeftBar or WebTopBar), it will return the contents of %SECURITYLOCKED% or %SECURITYUNLOCKED% depending on whether the page being viewed is authenticated or not.

Examples

You type	Simulated locked	Simulated unlocked	If installed
%SECURITY%			%SECURITY%

Plugin Settings

Plugin settings are stored as preferences variables. To reference a plugin setting write %<plugin>_<setting>%, i.e. %INTERWIKIPLUGIN_SHORTDESCRIPTION%

• One line description, is shown in the TextFormattingRules topic:
  • Set SHORTDESCRIPTION = Shows if authentication required to view a page or not

• Debug plugin: (See output in data/debug.txt)
  • Set DEBUG = 0

• My own settings:
  • Set SECURITYLOCKED =
  • Set SECURITYUNLOCKED =

Plugin Installation Instructions

Note: You do not need to install anything on the browser to use this plugin. The following instructions are for the administrator who installs the plugin on the server where TWiki is running.

• Download the ZIP file from the Plugin web (see below)
• Unzip SecurityPlugin.zip in your twiki installation directory. Content:

  File:	Description:
  data/TWiki/SecurityPlugin.txt	Plugin topic
  data/TWiki/SecurityPlugin.txt,v	Plugin topic repository
  lib/TWiki/Plugins/SecurityPlugin.pm	Plugin Perl module
  pub/TWiki/SecurityPlugin/unlocked.gif	Unlocked lock image

• Test if the installation was successful:
  • %SECURITY% <- there should be a little picture of a lock (locked or unlocked)
  • this of course depends on your settings for SECURITYLOCKED and SECURITYUNLOCKED and the rights required to read this page
  • See also the Examples section above

• Customize the Variables if desired

Plugin Info

Related Topics: TWikiPreferences, TWikiPlugins, TWikiUserAuthentication

-- MichaelGindonis - 13 Jul 2005