Difference: TWikiAccessControl (30 vs. 31)

Revision 312005-11-11 - TWikiContributor

Line: 1 to 1
	On this page: An Important Control Consideration Permissions settings of the webs on this TWiki site Authentication vs. Access Control Users and Groups Managing Users Managing Groups The Super Admin Group Restricting Access Controlling access to a Web Controlling access to a Topic Allowing public access to specific topics in a restricted web Empty values in access control variables Securing File Attachments Controlling who can manage top-level webs How TWiki evaluates ALLOW/DENY settings Allowing web creation/deletion/rename by user mapping manager Forbid certain users to do certain actions by configuration User masquerading Dynamic access control Example 1 - restriction based on topic name Example 2 - restriction based on form field Dynamic access control in accessing a different web's topic Topic level dynamic access control Dynamic access control and user masquerading Avoiding vulnerability Disabling dynamic access control Access control and INCLUDE Customizing "access denied" message Custom user/group notations Access Control quick recipes Restrict Access to Whole TWiki Site Authenticate and Restrict Selected Webs Only Hide Control Settings Obfuscating Webs Read-only Skin Mode Configuring access control for topics of a certain name in all webs
Line: 10 to 10
	*Tip:* TWiki:TWiki.TWikiAccessControlSupplement on TWiki.org has additional documentation on access control.
Added:
> >
	An Important Control Consideration Open, freeform editing is the essence of WikiCulture - what makes TWiki different and often more effective than other collaboration tools. For that reason, it is strongly recommended that decisions to restrict read or write access to a web or a topic are made with great care - the more restrictions, the less Wiki in the mix. Experience shows that unrestricted write access works very well because:
Line: 166 to 167
	This setup can be useful to hide a new web until content its ready for deployment, or to hide view access restricted webs.
Changed:
< <	*Note:* Obfuscating a web without view access control is very insecure, as anyone who knows the URL can access the web.
> >	*Note:* Obfuscating a web without view access control is very insecure, as anyone who knows the URL can access the web.
	Authenticate all Webs and Restrict Selected Webs
Line: 176 to 177
	`Set DENYWEBVIEW = < list of Users and Groups >` `Set ALLOWWEBVIEW = < list of Users and Groups >` *Note:* `DENYWEBVIEW` is evaluated before `ALLOWWEBVIEW`. Access is denied if the authenticated person is in the `DENYWEBVIEW` list, or not in the `ALLOWWEBVIEW` list. Access is granted in case `DENYWEBVIEW` and `ALLOWWEBVIEW` is not defined.
Deleted:
< <	Hide the web from an "all webs" search. Enable this restriction with the `NOSEARCHALL` variable in its WebPreferences topic: `Set NOSEARCHALL = on`
	Authenticate and Restrict Selected Webs Only
Line: 187 to 186
	`Set DENYWEBVIEW = < list of Users and Groups >` `Set ALLOWWEBVIEW = < list of Users and Groups >` *Note:* `DENYWEBVIEW` is evaluated before `ALLOWWEBVIEW`. Access is denied if the authenticated person is in the `DENYWEBVIEW` list, or not in the `ALLOWWEBVIEW` list. Access is granted in case `DENYWEBVIEW` and `ALLOWWEBVIEW` is not defined.
Deleted:
< <	Hide the web from an "all webs" search. Enable this restriction with the `NOSEARCHALL` variable in its WebPreferences topic: `Set NOSEARCHALL = on`
	Hide Control Settings

View topic | History: r44 < r43 < r42 < r41 | More topic actions...

Copyright © 1999-2025 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback
Note: Please contribute updates to this topic on TWiki.org at TWiki:TWiki.TWikiAccessControl.

Difference: TWikiAccessControl (30 vs. 31)

Revision 312005-11-11 - TWikiContributor

An Important Control Consideration

Authenticate all Webs and Restrict Selected Webs

Authenticate and Restrict Selected Webs Only

Hide Control Settings