01.12.2012 Views

7 Components: the Function Pages - Developers

7 Components: the Function Pages - Developers

7 Components: the Function Pages - Developers

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

NobodyGroup<br />

TWikiAdmin<br />

Group<br />

208<br />

��<br />

��<br />

��<br />

In <strong>the</strong> following lines, scripts are listed that from now on will require<br />

a valid user name. You should not change <strong>the</strong>m, since a few interdependencies<br />

exist (e.g. edit and save must have <strong>the</strong> same authorizations).<br />

Change <strong>the</strong> name of.htaccess.txt to .htaccess. If you <strong>the</strong>n attempt<br />

to edit a page in TWiki, you should receive a request to log in.<br />

Log in, perform a trial edit, and save it. If it works, you have successfully<br />

activated au<strong>the</strong>ntication.<br />

Note: You should definitely copy <strong>the</strong> topic ChangePassword from<br />

<strong>the</strong> TWiki web to <strong>the</strong> Main web, so that registered users can change<br />

<strong>the</strong>ir passwords directly via <strong>the</strong>ir user page. O<strong>the</strong>rwise, this link will<br />

lead from <strong>the</strong> user page to nothing, which can be very confusing.<br />

14.4<br />

Access Control<br />

Access to <strong>the</strong> files in TWiki can be controlled very precisely. The<br />

users are identified by <strong>the</strong>ir user names, which are known to <strong>the</strong> system<br />

via au<strong>the</strong>ntication. Since it would be very cumbersome to continually<br />

list all authorized users for every action, we can categorize<br />

users into groups. In keeping with TWiki logic, <strong>the</strong>se, in turn, are<br />

also only topics in which <strong>the</strong> corresponding users are listed. A list of<br />

all existing groups can be found under TWikiGroups. Here, in a new<br />

system, you should only see <strong>the</strong> NobodyGroup and <strong>the</strong> TWikiAdminGroup.<br />

The first group has no members, and for good reason: Using it,<br />

you can completely prohibit certain actions that are potentially hazardous<br />

(so that nobody has permission to execute <strong>the</strong>m). Such actions<br />

include, for instance, renaming TWikiPreferences or TWikiAdminGroup.<br />

As you will see, this does not offer complete protection,<br />

since <strong>the</strong>se permissions may be changed by anyone having editing<br />

rights to a page. However, it is an effective means of protection<br />

against accidental actions.<br />

The second group is <strong>the</strong> Administrator Group. By default, admins<br />

have editing permissions for all pages and may generate new webs.<br />

Of course, this too, can be changed. The members of a group are defined<br />

with <strong>the</strong> variable GROUP. In <strong>the</strong> standard installation, you will<br />

see that <strong>the</strong> developers of TWiki are still listed as admins. You will<br />

also see that several users are simply written one after <strong>the</strong> o<strong>the</strong>r, delimited<br />

by commas. Your user name should definitely be here as<br />

well, if you are responsible for <strong>the</strong> TWiki.<br />

14 User Permissions in TWiki

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!