On 03/27/2013 08:52 AM, Benjamin Kunz wrote: > Hello, > > i would like to set up a private (corporate) XWiki installation. > > I have a problem in the testing installation that i would have to > solve before i can go ahead. > > When i set "prevent unregistered users from viewing pages, regardless > of the page or space rights", the ResetPassword page is affected by > this setting. This creates, as you can imagine, a quite paradoxical > situation. > > > What is the recommended way to set up a private wiki, or is this a bug? > > Note that this happens in the latest 4.5 as well as 5.0 branches.
It is a know limitation. The problem is that when you prevent view rights for all unauthenticated users, you're also forbidding access to the password reset page, which is a document in the wiki like all the others. One workaround for the moment is to set rights differently: instead of checking "prevent unregistered users from viewing pages", deny all the rights to the unauthenticated user. This should by default forbid access to most parts of the wiki, except where explicitly granted rights, such as the password reset feature. -- Sergiu Dumitriu http://purl.org/net/sergiu _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
