Question

Every registered user have permission to rename a web. I can't figure out how to restrict this. I have all my permissions setup with ALLOW and DENY (topic,web,rename) in the default configuration.

For test proposes i added the following on the web WebPreferences topic:

• Set DENYWEBRENAME = TestUser
• Set DENYWEBCHANGE = TestUser
• Set DENYTOPCHANGE = TestUser

When TestUser tries to rename a warning appears showing that he doesnt have permission to modifiy many topics, but after clicking continue he still can rename the entire Web!

He can also rename TWiki web, with the corresponding mess that derives from that.

I have tested this on many TWiki 4.2 fresh installations and can't figure out what's wrong.

Environment

-- DiegoSainz - 22 Apr 2008

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

Not an answer, but I escaped the access control settings so that everybody can add a comment to this topic.

-- PeterThoeny - 23 Apr 2008

Sorry, closing this question after more than 30 days of inactivity. Feel free to re-open if needed.

-- PeterThoeny - 03 Jun 2008

I have the same problem TWiki-4.2.0, Tue, 22 Jan 2008, build 16278, Plugin API version 1.2 apache2-2.2.3-16.9 same perl version

i set Set DENYWEBRENAME and it doesn't work. i also can rename a web.

-- TimmWiegel - 03 Jun 2008

Closing this after more than 30 days of inactivity. Please feel free to re-open if needed.

-- PeterThoeny - 02 Aug 2008