-----Original Message-----
From: Liz Fairman - LAWLIBX 
Sent: Thursday, July 31, 2008 1:44 PM
To: 'flexwiki-users@lists.sourceforge.net'
Subject: RE: Authentication problems

John,

Thanks for the suggestions, but edit privileges are either all or
nothing.  With 
  <AuthorizationRules>
   <Rule Type="Allow" Action="Edit" Principal="authenticated" /> 
under federal configuration, users can edit every namespace.  If I take
the line out because I entered rules in each namespace, they can't edit
anything.

In the namespace I need protected, I put this:
        <AuthorizationRules>
          <Rule Type="Allow" Action="Read" Principal="all" />
          <Rule Type="Allow" Action="Edit"
Principal="user:admin1,admin2" />
          <Rule Type="Deny" Action="Edit" Principal="user:testuser" />
          <Rule Type="Allow" Action="ManageNamespace"
Principal="user:admin1" />
         </AuthorizationRules>

In other namespaces where I want people to contribute, it's this:

    <AuthorizationRules>
      <Rule Type="Allow" Action="Read" Principal="all" />
      <Rule Type="Allow" Action="Edit" Principal="authenticated" />
      <Rule Type="Allow" Action="ManageNamespace"
Principal="user:fairmanm" />
    </AuthorizationRules>

Still the federal configuration governs the namespaces. 
Any more ideas out there?

Liz Fairman                
Technical Services Librarian
Superior Court Law Library
Phoenix AZ 85003
602-506-3462
[EMAIL PROTECTED]

------------------------------

Message: 6
Date: Thu, 31 Jul 2008 15:49:04 -0400
From: "John Davidson" <[EMAIL PROTECTED]>
Subject: Re: [Flexwiki-users] Authentication problems
To: "FlexWiki Users Mailing List"
        <flexwiki-users@lists.sourceforge.net>
Message-ID:
        <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="iso-8859-1"

Hi Liz,
ManageNamespace permission includes the edit topic capability, so you
are only stopping testuser from managing the namespace but still
allowing the edit all topics. Instead try one of the following
(whichever suits your
requirement):

      <Provider Id="81e94b31-48f3-4f60-836d-ed0efe8cb48d"
Type="FlexWiki.FileSystemNamespaceProvider" AssemblyName="FlexWiki,
Version= 2.0.0.186, Culture=neutral, PublicKeyToken=null">
        <Parameters>
          <Parameter Name="Namespace" Value="RIS" />
          <Parameter Name="Root" Value="RIS" />
        </Parameters>
        <AuthorizationRules>
          <Rule Type="Allow" Action="Read" Principal="all" />
          <Rule Type="Deny" Action="Edit" Principal="user:testuser" />
          <Rule Type="Allow" Action="ManageNameSpace"
Principal="user:adminuser" />
        </AuthorizationRules>
      </Provider>

or if you do not want adminuser to also be able to manage the namespace
but just edit topics then

      <Provider Id="81e94b31-48f3-4f60-836d-ed0efe8cb48d"
Type="FlexWiki.FileSystemNamespaceProvider" AssemblyName="FlexWiki,
Version= 2.0.0.186, Culture=neutral, PublicKeyToken=null">
        <Parameters>
          <Parameter Name="Namespace" Value="RIS" />
          <Parameter Name="Root" Value="RIS" />
        </Parameters>
        <AuthorizationRules>
          <Rule Type="Allow" Action="Read" Principal="all" />
          <Rule Type="Allow" Action="Edit" Principal="user:adminuser" />
          <Rule Type="Deny" Action="Edit" Principal="user:testuser" />
        </AuthorizationRules>
      </Provider>


John Davidson

On Thu, Jul 31, 2008 at 2:13 PM, Liz Fairman - LAWLIBX <
[EMAIL PROTECTED]> wrote:

>  All,
>
> I have a namespace that should allow only a few people edit 
> privileges.  So far, I can allow or deny edit privileges for the whole

> wiki, but not for just one namespace.  A hint on the flexwiki website 
> said to put a rule in the namespace definition section.  So, in the 
> wiki config file I put these
> lines:
>
>       <Provider Id="81e94b31-48f3-4f60-836d-ed0efe8cb48d"
> Type="FlexWiki.FileSystemNamespaceProvider" AssemblyName="FlexWiki, 
> Version= 2.0.0.186, Culture=neutral, PublicKeyToken=null">
>         <Parameters>
>           <Parameter Name="Namespace" Value="RIS" />
>           <Parameter Name="Root" Value="RIS" />
>         </Parameters>
>         <AuthorizationRules>
>           <Rule Type="Allow" Action="Read" Principal="all" />
>           <Rule Type="Allow" Action="Edit" Principal="user:adminuser"
/>
>           <Rule Type="Deny" Action="ManageNameSpace"
> Principal="user:testuser" />
>         </AuthorizationRules>
>       </Provider>
>
> Testuser, however, can still edit any pages.  What am I missing here?

> How do I restrict editing for just one group?
> **
> *Liz Fairman                 *
>
> Technical Services Librarian
>
> Superior Court Law Library
>
> Phoenix Az 85003
>
> 602-506-3462
>
> [EMAIL PROTECTED]  *
>
>
> ----------------------------------------------------------------------
> --- This SF.Net email is sponsored by the Moblin Your Move Developer's

> challenge Build the coolest Linux based applications with Moblin SDK &

> win great prizes Grand prize is a trip for two to an Open Source event

> anywhere in the world 
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Flexwiki-users mailing list
> Flexwiki-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/flexwiki-users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...

------------------------------

------------------------------------------------------------------------
-
This SF.Net email is sponsored by the Moblin Your Move Developer's
challenge Build the coolest Linux based applications with Moblin SDK &
win great prizes Grand prize is a trip for two to an Open Source event
anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/

------------------------------

_______________________________________________
Flexwiki-users mailing list
Flexwiki-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/flexwiki-users


End of Flexwiki-users Digest, Vol 26, Issue 39
**********************************************

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Flexwiki-users mailing list
Flexwiki-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/flexwiki-users

Reply via email to