Difference: TWikiAccessControl (19 vs. 20)

Revision 202001-12-02 - MikeMannix

Line: 1 to 1
	On this page: An Important Control Consideration Permissions settings of the webs on this TWiki site Authentication vs. Access Control Users and Groups Managing Users Managing Groups The Super Admin Group Restricting Access Controlling access to a Web Controlling access to a Topic Allowing public access to specific topics in a restricted web Empty values in access control variables Securing File Attachments Controlling who can manage top-level webs How TWiki evaluates ALLOW/DENY settings Allowing web creation/deletion/rename by user mapping manager Forbid certain users to do certain actions by configuration User masquerading Dynamic access control Example 1 - restriction based on topic name Example 2 - restriction based on form field Dynamic access control in accessing a different web's topic Topic level dynamic access control Dynamic access control and user masquerading Avoiding vulnerability Disabling dynamic access control Access control and INCLUDE Customizing "access denied" message Custom user/group notations Access Control quick recipes Restrict Access to Whole TWiki Site Authenticate and Restrict Selected Webs Only Hide Control Settings Obfuscating Webs Read-only Skin Mode Configuring access control for topics of a certain name in all webs
Line: 41 to 41
	Managing Groups Groups are defined by group topics in the `Main` web, like the TWikiAdminGroup. To start a new group:
Changed:
< <	Create a new topic with A name that ends in Group, `SomeGroup`
> >	Create a new topic with A name that ends in Group, `SomeGroup`
	Define two variables: Set GROUP = < list of users and groups > Set ALLOWTOPICCHANGE = < list of users and groups >
Changed:
< <	GROUP is a comma-separated list of users and of other groups: `* Set GROUP = Main.SomeUser, Main.OtherUser, Main.SomeOtherGroup`
> >	GROUP is a comma-separated list of users and of other groups: `Set GROUP = Main.SomeUser, Main.OtherUser, Main.SomeOtherGroup`

Changed:
< <	ALLOWTOPICCHANGE defines who is allowed to change the group topic; it is a comma delimited list of users and groups. You typically want to restrict that to the members of the group itself, so it should contain the name of the topic, `* Set ALLOWTOPICCHANGE = Main.TWikiAdminGroup` for the TWikiAdminGroup topic. (This prevents users not in the group from editing the topic and from gaining unauthorized membership to the group.)
> >	ALLOWTOPICCHANGE defines who is allowed to change the group topic; it is a comma delimited list of users and groups. You typically want to restrict that to the members of the group itself, so it should contain the name of the topic, `Set ALLOWTOPICCHANGE = Main.TWikiAdminGroup` for the TWikiAdminGroup topic. (This prevents users not in the group from editing the topic and from gaining unauthorized membership to the group.)
	Restricting Write Access
Line: 135 to 137
	Set NOSEARCHALL = on It is not recommended to restrict view access to individual topics since all content is searchable within a web.
Added:
> >	Hiding Control Settings To hide access control settings from normal browser viewing, place them in comment markers. <!-- Set DENYTOPICCHANGE = Main.SomeGroup -->
	The SuperAdminGroup
Line: 147 to 158
	The default setting is not to have superusers.
Changed:
< <	-- PeterThoeny - 16 Mar 2001 -- AndreaSterbini - 11 Apr 2001
> >	-- MikeMannix - 02 Dec 2001

View topic | History: r44 < r43 < r42 < r41 | More topic actions...

Copyright © 1999-2025 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback
Note: Please contribute updates to this topic on TWiki.org at TWiki:TWiki.TWikiAccessControl.

Difference: TWikiAccessControl (19 vs. 20)

Revision 202001-12-02 - MikeMannix

Managing Groups

Restricting Write Access

Hiding Control Settings

The SuperAdminGroup