Question

Hello,

I'm having a problem with page security and setting it using groups vs. users.

I posted this a couple hours ago, but did something dumb - I was included samples of the topic security I was using, and in copying it, I applied that security to the support question page!

Doh!

So here I have posted the question again, and hopefully haven't applied any security to it - I removed the word SET from all the examples below.

I have the following in a topic page, to protect only that page from some users. In the web this topic is in, the users listed in DENYTOPICVIEW have editing access to the web in general; I just want to prevent them from viewing this page:

DENYTOPICVIEW = KathyTest, CsChiefConcierge, CyChiefConcierge, CsConcierge, CyConcierge, CsClearanceOfficer, CyClearanceOfficer, CsEditor, CyEditor

ALLOWTOPICVIEW = TWikiAdminGroup, CorporateUsersGroup, HotelDirectorsViewAllGroup, CSFrontOfficeManager, CyFrontOfficeManager

DENYTOPICCHANGE =

ALLOWTOPICCHANGE = TWikiAdminGroup, CSFrontOfficeManager, CyFrontOfficeManager

DENYTOPICRENAME =

ALLOWTOPICRENAME = TWikiAdminGroup

The above works fine: The users listed in DENYTOPIC VIEW cannot view the topic page.

BUT, I created a group (FrontOfficeMgrHandoverNoViewGroup) and put all those users in DENYTOPICVIEW in that group - here's the group definition:

GROUP = KathyTest, CsChiefConcierge, CyChiefConcierge, CsConcierge, CyConcierge, CsClearanceOfficer, CyClearanceOfficer, CsEditor, CyEditor Persons/group who can change the list:

ALLOWTOPICCHANGE = TWikiAdminGroup

Then in the topic page I put the following:

DENYTOPICVIEW = FrontOfficeMgrHandoverNoViewGroup

ALLOWTOPICVIEW = TWikiAdminGroup, CorporateUsersGroup, HotelDirectorsViewAllGroup, CSFrontOfficeManager, CyFrontOfficeManager

DENYTOPICCHANGE =

ALLOWTOPICCHANGE = TWikiAdminGroup, CSFrontOfficeManager, CyFrontOfficeManager

DENYTOPICRENAME =

ALLOWTOPICRENAME = TWikiAdminGroup

The users in the FrontOfficeMgrHandoverNoViewGroup group CAN view the topic page.

I must be doing something wrong ... does someone have any advice?

It seems to me that I shouldn't actually have to use the DENYTOPICVIEW at all, and that it should be enough to leave the users out of the ALLOWTOPICVIEW, but that wasn't working, so that's when I tried the DENYTOPICVIEW

Thanks

Environment

-- KathyDeLaCruz - 22 Oct 2007

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

Sorry, closing this after more than 30 days of inactivity. Please feel free to re-open if needed.

-- PeterThoeny - 03 Dec 2007