This opens a can of worms. We cannot efficiently check if the user has access before selecting the page. So the solution as a compromise. We allow searching for all page but content is only shown if user is allowed.
massimo On Sunday, 20 January 2013 14:45:18 UTC-6, Alan Etkin wrote: > > > Should all pages be searchable? > > If a user cannot read a wiki page, he shouldn't get the slug in results > either, I suppose. > > A more fine grained control would need a can_search field added to > wiki_page (I belive there's no can_read field in that table), but also > would complicate the access control code > --
