Question:

I cannot get topic restrictions to work. I have read TWikiAccessControl many times and followed the spec religiously but still others can edit my topic-controlled pages. Here is what is defined in my topic:

• • example: Set DENYTOPICCHANGE =
  • example: Set ALLOWTOPICCHANGE = AnyUser?

I am using .htaccess authentication to define the username. Curiously, setting ALLOWWEBCHANGE in WebPreferences to a group does indeed lock people out if they are not in the defined group. Any ideas?

Could it have anything to do with the following variables not being set throughout the user session?

• ENV->REMOTE_USER:
• % USERNAME %: guest

Note: I've noticed that the USERNAME value generally doesn't work when the user is just viewing topics, but does work when editing. For example, when viewing the topic the USERNAME value would be null, and once I click 'edit' and 'preview' the USERNAME would show the name defined by .htaccess authentication but once the topic is published, the value is lost again.

-- RickOliver - 01 Nov 2001

Also It I want to allow a sigle user to change a topic, as I understand it I first

set DENYTOPICCHANGE = ALL USERS

then I

set ALLOWTOPICCHANGE = KentDeines

How do I say all users? Is there an AllUsersGroup? ?

-- KentDeines - 10 Nov 2003

I think that when there is nothing to the right of the = it means all.

I think the solution to Rick's problem is to change the FINALPREFERENCES variable to allow the ALLOW/DENY variables to be changed on the individual topics. -- KentDeines - 10 Nov 2003

Answer:

(Not an answer, but moved from the TWiki.TWiki web)

@ KentDeines : Not sure about that AllUsersGroup but... what about just listing groups? kind of set ALLOWTOPICCHANGE = Main.TWikiGroup1, Main.TWikiGroup2, Main.TWikiUser1,  ... -- FranGarcia - 05 Jul 2007