[tw5] Re: Sending tm-save-wiki while running as WebServer and avoiding the download dialog

2021-11-24 Thread Charlie Veniot
Totally agree. It is a fool's errand to think one can secure TiddlyWiki, unless I've missed something somewhere that says otherwise. I'm just about minimizing the pains in the caboose caused by human error, by computer-related total foulups, and certain kind of folk who should crawl back in

[tw5] Re: Sending tm-save-wiki while running as WebServer and avoiding the download dialog

2021-11-24 Thread andres....@gmail.com
Yeah, security isn't really my aim here. I back it all up regularly so it's really just a) trying to save me from someone that felt like being a d*ck and b) family getting confused when roaming around. My family, on both my side and my wife's, like for me to keep a wishlist. So I have it on my

[tw5] Re: Sending tm-save-wiki while running as WebServer and avoiding the download dialog

2021-11-24 Thread Charlie Veniot
Poop. Typo: there is one *KINK* in the setup. On Wednesday, November 24, 2021 at 1:27:44 PM UTC-4 Charlie Veniot wrote: > Arg. I forgot to mention there is one kind in the setup: tiddler import > mechanism. > > An enterprising and knowledgeable-enough TiddlyWiki user can break my > secure

[tw5] Re: Sending tm-save-wiki while running as WebServer and avoiding the download dialog

2021-11-24 Thread Charlie Veniot
Arg. I forgot to mention there is one kind in the setup: tiddler import mechanism. An enterprising and knowledgeable-enough TiddlyWiki user can break my secure setup by dragging and dropping a tiddler that totally up-ends my fine-grained security. That's the one thing I need to resolve. On

[tw5] Re: Sending tm-save-wiki while running as WebServer and avoiding the download dialog

2021-11-24 Thread Charlie Veniot
Alternatively, you could setup a "guest" login account that anybody could use to edit only certain tiddlers. For that to work requires some trickery that allows only certain users to do certain things for certain tiddlers. It is a setup for fine-grained user-id/role fine-grained control which

[tw5] Re: Sending tm-save-wiki while running as WebServer and avoiding the download dialog

2021-11-24 Thread Charlie Veniot
I think how I'd set things up: Those few tiddlers you want anonymous users to edit, put those in another TiddlyWiki, say TiddlyWiki B. TiddlyWiki A being the one you referenced in your OP. Setup TiddlyWiki A to include TiddlyWiki B. For tiddlers from TiddlyWiki B, setup an alternative "edit