ThomasP wrote: > Hello, > > just catching up some weeks of pmwiki mail. With what you wrote my mail > before seems to become outdated. > > On Tue, June 5, 2007 20:02, IchBin wrote: >> IchBin wrote: >> >> Not sure if I mentioned this Thomas but as an 'admin' user there is no >> security problem posting a formatted item to the WikiCalendar using the >> (:wikilogbox:) markup. Guess this would rule out any non normalized page > > This is indeed quite good to know!!! > >> url. The problem is only with a regular user even though they have a >> 'ed_Calendar.*' rule. I mean the format of the calendar days is >> 'Calendar.yyyymmdd'. >> > > I have tested that 'Calendar.20071111' matches 'Calendar.*' with the UA2 > functions, so no problems from the pattern check to be expected. It would > thus indeed be very interesting to know where the problem stems from. > > Idea: put the ed_Calendar rule in another (GuestUsers) record and see > whether things change. > > And: Please double check spelling of word 'Calendar' everywhere before > going on looking for bugs. > > Thomas
I have doubled checked the rule and matching file name and this is correct. I have this rule in a group for some users. That is, it is 'Calendar.*' for rule 'ed_Calendar.*'. I think the rule is fine because if I do not use the (:wikilogbox:) markup to add or update a calendar date page I get no security error and works as designed.. Doing this with out the (:wikilogbox:) markup you do: - Select a day on the visible calendar on the 'Calendar/Calendar' page. This opens or creates a calendar date page. - Enter my text and save on that page and there is no problem. - After this it displays on the visual calendar and by using the (:thisweek:) markup. If I take that rule out of this group I can not do what I just mentioned above. So the rule is fine there is a one-to-one relationship by having or not having that rule. Seems that the problem is the interaction between the (:wikilogbox:) and UserAuth2. I'm still trying to find a good PHP debugger. -- Thanks in Advance... http://weconsulting.org IchBin, Philadelphia, Pa, USA http://ichbinquotations.weconsulting.org ______________________________________________________________________ 'If there is one, Knowledge is the "Fountain of Youth"' -William E. Taylor, Regular Guy (1952-) _______________________________________________ pmwiki-users mailing list [email protected] http://www.pmichaud.com/mailman/listinfo/pmwiki-users
