Janne Jalkanen wrote:
On 30 May 2008, at 01:47, Murray Altheim wrote:
Andrew Jaquith wrote:
JSPWiki security policies cannot express concepts like "allow access
to everything EXCEPT page X." What you will have to do is use ACLs on
pages that begin with "Private" to restrict access to the groups you
want.
Future versions of JSPWiki will have the concept of "spaces," which
will address this issue more gracefully.
Andrew,
This got me thinking and while I don't have the time to do the work
I can see a somewhat simple solution to this via a plugin. What I'd
do is design a plugin that:
Why write a WikiPlugin? Wouldn't it be more logical to build your own
AclManager? It's only four methods, and with those you can pretty much
control everything... You could have an AclManager which uses regexps
to control the access.
Janne,
Good point. I had previously written a "PassThroughAuthorizer" that
let everything through, and a regex-based one would be equally easy.
Cheers,
Murray
...........................................................................
Murray Altheim <murray07 at altheim.com> === = =
http://www.altheim.com/murray/ = = ===
SGML Grease Monkey, Banjo Player, Wantanabe Zen Monk = = = =
Boundless wind and moon - the eye within eyes,
Inexhaustible heaven and earth - the light beyond light,
The willow dark, the flower bright - ten thousand houses,
Knock at any door - there's one who will respond.
-- The Blue Cliff Record
