SID-00471: Allowing changes done by specific plugins

Status:	Answered	TWiki version:		Perl version:
Category:	CategoryAccessControl	Server OS:		Last update:	16 years ago

I have restricted the permission to change a topic to a small number of people using the setting ALLOWWEBCHANGE = %MAINWEB%.TWiki.AdminGroup in the WebPreferences topic. On the other hand, I would like to allow any user to enter a comment to a topic. For that reason I have included the Comment plugin of the TWiki Enterprise Collaboration Platform. Entering a comment, however, leads the user to an access denied page.

How can I allow users to enter comments without allowing them to change the whole topic?

-- MichaelBeck - 2009-08-10

Discussion and Answer

In YourTopic include a CommentsTopic using %INCLUDE{"CommentsTopic"} and in the comment plugin invocation use the target parameter. CommentsTopic should have write access but YourTopic can remain protected.

.
.
.
YourTopic body
.
.
.
%COMMENT{ target="CommentsTopic"}%
%INCLUDE{"CommentsTopic"}%

-- EnriqueCadalso - 2009-08-11

You can do that transparently by having one web for actual content with access restriction, and an open web for comments. Each content page has an associated comments page in the comments web. Assuming you have a web called Eng and a web called EngComments, you can add this to the end of content pages:

%COMMENT{ target="EngComments.%TOPIC%" }%
%INCLUDE{"EngComments.%TOPIC%"}%

-- PeterThoeny - 2009-08-11

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.