SID-00846: the mapping of access control actions and cgi scripts

Status:	Answered	TWiki version:	4.3.2	Perl version:	5
Category:	CategoryAccessControl	Server OS:	Centos 5	Last update:	15 years ago

Hi,

I'm a newbie to TWiki and Perl language. I'm just investigating how TWiki does the access control. From the access control document, there are three actions defined: VIEW, CHANGE and RENAME. However there are many more cgi scripts that might be called in the request. These are the scripts I found under /bin:

attach, configure, login, oops, rdiff, register, resetpasswd, save, upload, viewauth, changes, edit, logon, manage, preview, rdiffauth, rename, rest, search, statistics, view, viewfile

May question is how these script names map to the there actions? I guess there must be a mapping in a spec. or somewhere in the source code, but I couldn't find it. Could anyone please give me an idea?

Thanks in advance. David

-- DavidChen2010 - 2010-05-21

Discussion and Answer

Good point. TWiki is open source, I invite you to fix incomplete documentation in the TWiki web!

VIEW relates to any view action, that includes view, preview, rdiff, changes, search, viewfile, part of manage.

CHANGE relates to any action where content is changed, that includes attach, save, upload, edit, rest, and part of manage

RENAME relates to any action where content is changed, that includes rename.

-- PeterThoeny - 2010-07-04

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.