Re: [pmwiki-devel] PmWiki security

2009-08-26 Thread Simon
Good point, thankyouso long since I have been there.
Does raise an interesting point though, should the edit action be disabled
for that page?

Simon

2009/8/26 Hans desi...@softflow.co.uk

  Wednesday, August 26, 2009, 11:47:14 AM, Simon wrote:


   

 When I try to access a GroupAttributes page

 instead of opening the expected form

 it opens a new page

 Same on PmWik


 http://www.pmwiki.org/wiki/PmWiki/GroupAttributes?action=edit




 I think you want to use  action=attr, not  action=edit:


GroupName.GroupAttributes?action=attr



 Hans




-- 

http://kiwiwiki.co.nz
___
pmwiki-devel mailing list
pmwiki-devel@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-devel


Re: [pmwiki-devel] PmWiki security

2009-08-26 Thread Petko Yotov
On Wednesday 26 August 2009 13:07:16 Simon wrote:
 Good point, thankyouso long since I have been there.
 Does raise an interesting point though, should the edit action be disabled
 for that page?

If we lock that page for editing, the whole group will be locked. :-) So, 
probably, no it shouldn't.

Some wikis may use this page for some group attributes/settings/PTVs or even 
headers/footers, which are stored in the page text content.

Petko

 2009/8/26 Hans desi...@softflow.co.uk
   Wednesday, August 26, 2009, 11:47:14 AM, Simon wrote:
  When I try to access a GroupAttributes page
  instead of opening the expected form
  it opens a new page
  http://www.pmwiki.org/wiki/PmWiki/GroupAttributes?action=edit
 
  I think you want to use  action=attr, not  action=edit:
 
 GroupName.GroupAttributes?action=attr

___
pmwiki-devel mailing list
pmwiki-devel@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-devel