Question

How do I exclude access restricted topics from WebSearch and BookView if the current user does not have the rights to access these topics?

On our corporate intranet TWiki site, the users sometimes create personal topics just for their own use (scribbling down ideas, taking notes, you know) and set access restrictions like ALLOWTOPICVIEW = SomeUser to these topics. Although these topics are meant to be private, any user can stumble upon them using WebSearch and see the topic summary. More worse, using the BookView feature, any user can read the whole content (!) of these private topics.

I already searched the whole TWiki.org site for "search access" and "bookview access", but found nothing enlightening.

So, how can the access restrictions be enforced in the WebSearch? Maybe the restricted topics could just be excluded from the search results?

Thanks for any help!
Christoph

Environment

-- ChristophGrothaus - 03 Aug 2006

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

I just realised that the described behaviour only applies for access restrictions that are set via More topic actions -> Edit topic preference settings. If I set the access restrictions in the text of the topic itself, the topic gets excluded from the search results. If the access restrictions are set in the preference settings, they are ignored by WebSearch.

This needs to be fixed.

-- ChristophGrothaus - 03 Aug 2006

This is a bug in Dakar. It was reported yesterday as Bugs:Item2714 / Requirement, please add any follow up information to that report.

-- SteffenPoulsen - 03 Aug 2006