[dokuwiki] Re: Dokuwiki http headers...
- From: Mike Frysinger <vapier@xxxxxxxxxx>
- To: dokuwiki@xxxxxxxxxxxxx
- Date: Fri, 22 Oct 2010 13:22:45 -0400
On Friday, October 22, 2010 12:51:50 Andreas Haerter wrote:
> Am 22.10.2010 17:30, schrieb Mike Frysinger:
> > it's information leakage pure and simple. restricting pages from the
> > public because might be of a higher concern than for random users who
> > typo URLs.
>
> restricting page access != hiding pages. pure and simple (IMHO).
it wholly depends on the wiki instance's application of the ACLs. as part of
the "restrict page access", it might be desirable for "page existence" to be
controlled as well. perhaps extended the ACL interface to make "exists" a
permission in between "none" and "read". but considering most people wont
care, this might make things more complicated than necessary. which once
again means a config option.
$conf['acl_none_httpcode'] = 404;
-mike
Other related posts:
