SID-00317: How to protect child topics?

Status:	Answered	TWiki version:	4.3.0	Perl version:	5.10.0
Category:	CategoryAccessControl	Server OS:	Ubuntu 8.10	Last update:	16 years ago

Hi, I have created new topics on the main web that I know now to proctect with:

Set ALLOWTOPICVIEW = MyGroup Set ALLOWTOPICCHANGE = MyGroup Set ALLOWTOPICRENAME = TWikiAdminGroup

Inside that topic there are other topics (parent/child relationships show ok).

But if I get into the topic (after successful authentication), copy the link of a child topic, logout and paste that link I can get to the children topic and I'm not asked to login.

Do I have to have the same Set ALLOWTOPICVIEW = MyGroup, etc for the child topic or is there any hierachical rule I could apply so it happens automatically?

Thanks.

-- LucGarcia - 2009-05-15

Discussion and Answer

Correct, access control settings are not inherited from parent topics. You need to repeat the access control settings. For practical reasons consider this:

• Create a new web and lock down the whole web to a group. Is much easier, because you can forget about access control. More at TWikiAccessControl
• Lock down the template topic(s). More at TWikiTemplates

-- PeterThoeny - 2009-05-15

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.