[dokuwiki] Re: ACL question

  • From: Chris Smith <chris@xxxxxxxxxxxxx>
  • To: dokuwiki@xxxxxxxxxxxxx
  • Date: Thu, 13 Apr 2006 09:06:10 +0100

Daniel Mitchell wrote:

and then in acl.auth.php, I have:

# everyone can read
* @ALL 1
* @admins 16
notebook:*      @ALL    0

The problem is that when logged in as danielm, I only have read access
to pages in the notebook namespace. If I move the "* @admins 16" line to
the end of the ACL file, I still only have read access to those pages --
do I have to explicitly add "notebook:* @admins 16" to the ACL section
there?
I think pretty much yes. The "notebook:* @ALL 0" is overriding the "* @admins 16".

You may be able to get away with:
* @ALL 0
start @ALL 1
* @admins 16

ie. disable the whole wiki and give page specific access in the root directory, this will avoid having to create @ALL rules for other namespaces.

I can't guarantee that'll work as I am not a big ACL user.

However, your problem may argue for an additional ACL group and/or instruction
(1) @UNAUTH - group of users who aren't logged in
(2) !@smartboard - all users who don't belong to group @smartboard


Cheers,

Chris


-- DokuWiki mailing list - more info at http://wiki.splitbrain.org/wiki:mailinglist

Other related posts: