SID-00211: Group allow/deny settings - different behaviours!

Status:	Answered	TWiki version:	4.2.0	Perl version:	5.8.5 built for x86_64-linux-thread-multi
Category:	CategoryAccessControl	Server OS:	CentOS release 4.6 (Final), 2.6.9-67.0.20.ELsmp	Last update:	17 years ago

I am attempting to set the ALLOWTOPICCHANGE setting, to permit users that are affiliated with a group, to edit the group page.

I have set explicitly in the page:

   * Set GROUP = Main.TWikiAdminUser, Main.BobMarley
   * Set ALLOWTOPICCHANGE = TestGroup

Which allows bob marley to edit the page. However, I don't want these settings to appear in the page, either on the browser, or even in the wiki editor. I have moved the two lines above, into the more topic actions > edit settings, (just cut and past from the editor, with the required formatting etc).

Now, Bob marley is denied acess to editing the group page! "Access check on Main.TestGroup failed. Action "CHANGE": access not allowed on topic. "

I assumed that putting these controls in the topic actions would permit acess (as per the manual?).

-- TWikiGuest - 23 Mar 2009

Discussion and Answer

Moving the ALLOWTOPICCHANGE into the topic preferences is OK; not sure if it works with the GROUP setting.

If you do not want other people to see the setting try this:

   * Set GROUP = TWikiAdminUser, BobMarley
   * Set ALLOWTOPICCHANGE = TestGroup
   * Set ALLOWTOPICVIEW = TestGroup

Alternatively, enclose the bullets into an HTML comment:

<!--
   * Set GROUP = TWikiAdminUser, BobMarley
   * Set ALLOWTOPICCHANGE = TestGroup
-->

-- PeterThoeny - 24 Mar 2009

Thanks, Presently I have the allowtopicchange setting in the page itself (i.e. not in the topic preferences), and the rest of the settings commented out so they are not displayed on the page. I gather that settig the allowtopicview simply prevents (or enables) people to view the page, rather than removes the topic settings from view.

Ideally though, I'd like to remove the topicchange setting from the wiki page completely, and put it into the topic settings, since this makes the page a bit purer.

-- TWikiGuest - 24 Mar 2009

Whoops. I mean, I would like to move the Set GROUP setting (not the topicchange, as I said above) from the sight by viewers AND editors (i.e. put it in the topic settings page, or do something equivalent?)

-- TWikiGuest - 24 Mar 2009

Not sure, but it looks like you are using the group topic for actual content. I do not recommend to do that. Use the TWiki group just for the group definition and nothing else, and create a content page in another web. Lock down that other web or page to this group.

-- PeterThoeny - 24 Mar 2009

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.