Question

02 Sep 2004 $Rev: 1742 $, Plugin API version 1.025

On our Twiki we have about 10 users set into different groups. We had a new hire and I added him as a new user.

I have access control added to most of the topics in the Twiki. When the NewUser logs in and tries to access a topic that has ALLOWTOPICVIEW set to a group he is in, it tells him "No permission to read topic TopicName - perhaps you need to log in?

I have had no problems with the other that were all added in the beginning when we first implemented the Twiki. I have read the FAQ on the Twika Access control and haved searched the forums but I can't seem to find the answer.

Pleas Help.

Environment

-- TWikiGuest - 07 Sep 2006

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

If you are using external authentication, such as user name jsmith, TWiki can map that to the WikiName JohnSmith. This is done in your TWiki's Main.TWikiUsers topic. Make sure that the new user's bullet list in that topic lists the login name. Example:

• JohnSmith - jsmith - 08 Sep 2006

Also, check configure for the user mapping settings.

-- PeterThoeny - 08 Sep 2006

I have tried to do as you have said above with the JohnSmith - jsmith - 08 Sep 2006 but that has not seemed to help. We are using the .htpasswd authenication. It does not give the user a problem when he is trying to login, it happens when he tries to access a TWiki Topic that has the Set ALLOWTOPICVIEW = WhateverGroup. He is in the group, but when he tries to access that topic he is told "No permission to read topic TopicName - perhaps you need to log in?"

I don't know if this has anything to do with it but the TWiki Registration shows the url as blah~cgi-bin/twiki/view/TWiki/TWikiRegistration

The user is at blah~cgi-bin/twiki/view/Main/BenPorter

The web where the users are and all of our topics are is the Main web. It appears that the registration is on the TWiki web. Even though this is the case, it creates the new user in the Main Web. He shows up along with all of the others in blah~cgi-bin/twiki/view/Main/TWikiUsers

He is in a group with other users that have no problems accessing the TWiki topics, but he is not able to. I have tried to delete his account and recreate it but that has not worked.

I also don't know what you mean by check configure for the user mapping settings. I could not find that in the Twiki. Where do I look?

Thanks for your help.

-- TWikiGuest - 11 Sep 2006

Ah, there was a confusion, you stated TWikiRelease04x00x04 for the TWiki version, I fixed it to TWikiRelease02Sep2004 as per your comment on top.

Forget about the configure script, this is TWiki 4 specific. Also forget about the mapping since you are using a local .htpasswd.

How do you track user sessions? By IP address or with cookies? If with cookies, is the user blocking them? Can he login and access restricted content on a different machine?

-- PeterThoeny - 11 Sep 2006

Tracking user sessions was something that was new to me. I searched around and after learning a bit about it, as far as I can tell our TWiki tracks user sessions with cookies. I found a website that states that user sessions tracked by IP address is experimental and is set in the TWiki.cfg file. I searched that file and could not find anything about tracking about IP. I did see one line that I am not sure about;

SdoRemoveImgInMailnotify = "1"; Remember the remote user by matching the IP address.

As far as your other question about having the user login on a different machine. I have tried that from a couple of different machines and it still will not let him access the topics with any TWIKIACCESSCONTROL. None of the machines are set to block cookies.

I am sorry I am such a novice at this. I did not set up the TWiki and I have been given the job of administrating it. I am doing my best to figure it out. Thankyou for your help.

-- TWikiGuest - 15 Sep 2006

Sorry, closing after more than 30 days...

-- PeterThoeny - 24 Oct 2006