soooo,

even with:
if (CondAuth($pagename,'admin')) {
   $EnableFoxUrlInput = 'true';
   $FoxPagePermissions['*.*'] = 'all';
}
elseif (CondAuth($pagename,'edit')) {
        $EnableFoxUrlInput = 'true';
$FoxPagePermissions['*.*'] = 'all'; // replace necessary to be able to delete pages...
}
elseif (CondAuth($pagename,'read')) {
   $FoxPagePermissions['*.*'] = 'all';
}

i'm unable to delete from FoxNotifyLists.UserGroupA...
and in this case, there is no redirection - it stays on the UserGroupA-Notify page, and no foxmessage is output...

do you think it possible to delete from one group to another with different passwords set for each group? wondering if there's a way for me to reconfigure FoxNotify so that the notify info is actually stored within the user's own group?

a


On 10 Jul 2008, at 1:49 AM, Hans wrote:

Thursday, July 10, 2008, 9:37:57 AM, adam overton wrote:

i put a (:foxmessage:) on the resulting page (FoxNotifyLists.UserGroupA)
and received the expected msg: PERMISSION DENIED to delete on
FoxNotifyLists.Aaam!

and my FoxAuth is currently set to 'read'...

Rereading your first post, I think you need to add 'delete' to
the page permissions for the FoxNotifyLists group:

elseif (CondAuth($pagename,'read')) {
    $FoxPagePermissions['*.*'] = 'add';
    $FoxPagePermissions['FoxNotifyLists.*'] = 'add,delete';
}

This may solve it.

But thinking about security, what stops users from deleting other
user's notification entries?

  ~Hans


_______________________________________________
pmwiki-users mailing list
[email protected]
http://www.pmichaud.com/mailman/listinfo/pmwiki-users

Reply via email to