Re: UserPermissions

Hi

There are 2 layers of security on ACL pages, the first is set in jspwiki.policy 
and you also have control on a per page by using the [{ALLOW ...}] construct.

This is explained in the link provided by andrew

A 



On Thu, Aug 30, 2007 at 09:21:25AM -0700, Swarup123 wrote:
> 
> Consider the following example:
> 
> grant signedBy "jspwiki", 
>   principal com.ecyrd.jspwiki.auth.authorize.Role "Authenticated" {
>     permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:Main",
> "edit";
>     permission com.ecyrd.jspwiki.auth.permissions.GroupPermission "*:*",
> "edit";
>     permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*",
> "login";
> 
> }
> 
> If Jane, Murray and Swarup are authenticated users which means all these
> three users can edit the Main page, but at some point of time I want the
> user Swarup only to view the Main page but not edit the Main page.
> How can I do that ?  you may say I can create a seperate group whose members
> can only view Main page
> and make the user Swarup the member of this group, but I dont want to do it
> in that way.
> Is there a way ?
> 
> 
> Andrew Jaquith-2 wrote:
> > 
> > It is, but READ THE DOCUMENTATION PLEASE:
> > 
> > http://doc.jspwiki.org/2.4/wiki/Security#section-Security- 
> > CustomizingJSPWikiSecurity
> > 
> > Andrew
> > 
> > On Aug 30, 2007, at 11:33 AM, Swarup123 wrote:
> > 
> >>
> >> Its again a group of users and by default any member of the group  
> >> can edit
> >> i wanted to do it as one on one.
> >> consider the following example:
> >> ----------------------------
> >> User     |  WikiPage |  Role   |
> >> --------|------------------|
> >> Jane     |  Main      | edit    |
> >> Murray  |  Main      | view   |
> >> Admin   |  Main      | delete |
> >> Swarup |  Security | view   |
> >> ----------------------------
> >> this is something I am looking at..is this possible by any means in  
> >> JSPWiki
> >>
> >>
> >> Murray Altheim-2 wrote:
> >>>
> >>> Swarup123 wrote:
> >>>> Hi,
> >>>> How can I give permissions (view, edit, delete) to individual users
> >>>> besides
> >>>> using [{ALLOW view Janne}], bcoz if there are 100's of users I  
> >>>> cant use
> >>>> the
> >>>> same. Is there a way to specify the roles of users.
> >>>> plz suggest me..
> >>>
> >>> You'll want to create Groups and add specific users to those groups,
> >>> then set the permissions based on the groups. There is, for example,
> >>> an "Admin" group that has more permissions than non-group members,
> >>> such as being able to delete pages.
> >>>
> >>> The new security documentation and the documentation on groups found
> >>> on the wiki should provide all the information you need. If not,
> >>> please ask again for the missing pieces and we'll try to improve the
> >>> documentation.
> >>>
> >>> Thanks,
> >>>
> >>> Murray
> >>>
> >>> ..................................................................... 
> >>> ......
> >>> Murray Altheim <murray07 at altheim.com>                            
> >>> ===  =
> >>> =
> >>> http://www.altheim.com/murray/                                      
> >>> = =
> >>> ===
> >>> SGML Grease Monkey, Banjo Player, Wantanabe Zen Monk                
> >>> = =  =
> >>> =
> >>>
> >>>        Boundless wind and moon - the eye within eyes,
> >>>        Inexhaustible heaven and earth - the light beyond light,
> >>>        The willow dark, the flower bright - ten thousand houses,
> >>>        Knock at any door - there's one who will respond.
> >>>                                        -- The Blue Cliff Record
> >>> _______________________________________________
> >>> This is the Jspwiki-users mailing list, in which we discuss the
> >>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
> >>> For development discussion, please join jspwiki-dev.
> >>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> >>> http://www.jspwiki.org/JSPWikiMailingList
> >>>
> >>>
> >>
> >> -- 
> >> View this message in context: http://www.nabble.com/UserPermissions- 
> >> tf4354840.html#a12409777
> >> Sent from the JspWiki - User mailing list archive at Nabble.com.
> >>
> >> _______________________________________________
> >> This is the Jspwiki-users mailing list, in which we discuss the
> >> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
> >> For development discussion, please join jspwiki-dev.
> >> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> >> http://www.jspwiki.org/JSPWikiMailingList
> > 
> > _______________________________________________
> > This is the Jspwiki-users mailing list, in which we discuss the 
> > stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. 
> > For development discussion, please join jspwiki-dev.
> > http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> > http://www.jspwiki.org/JSPWikiMailingList
> > 
> > 
> 
> -- 
> View this message in context: http://www.nabble.com/UserPermissions-tf4354840.html#a12410871
> Sent from the JspWiki - User mailing list archive at Nabble.com.
> 
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss the 
> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. 
> For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList
>