Question

Every registered user have permission to rename a web. I can't figure out how to restrict this. I have all my permissions setup with ALLOW and DENY (topic,web,rename) in the default configuration.

For test proposes i added the following on the web WebPreferences topic:

• Set DENYWEBRENAME = TestUser?
• Set DENYWEBCHANGE = TestUser?
• Set DENYTOPCHANGE = TestUser?

When TestUser? tries to rename a warning appears showing that he doesnt have permission to modifiy many topics, but after clicking continue he still can rename the entire Web!

He can also rename TWiki web, with the corresponding mess that derives from that.

I have tested this on many TWiki 4.2 fresh installations and can't figure out what's wrong.

Environment

Answer

If you answer a question - or have a question you asked answered by someone - please remember to edit the page and set the status to answered. The status is in a drop-down list below the edit box.

Not an answer, but I escaped the access control settings so that everybody can add a comment to this topic.

-- PeterThoeny - 23 Apr 2008