Re: UserPermissions

for now lets keep aside jspwiki.policy and consider per page ACL. If there is
a page called Main and on the top this page user Jane writes [{ALLOW view
Janne, Swarup}] which means only Janne and Swarup can view this page and not
the other users but the user Swarup again modifies it to 
[{ALLOW view Janne, Swarup, Murray}]  which is not liked by Jane. 
So how can we resolve such conflicts ?


Alex Samad wrote:
> 
> Hi
> 
> There are 2 layers of security on ACL pages, the first is set in
> jspwiki.policy 
> and you also have control on a per page by using the [{ALLOW ...}]
> construct.
> 
> This is explained in the link provided by andrew
> 
> A 
> 
> 
> 
> On Thu, Aug 30, 2007 at 09:21:25AM -0700, Swarup123 wrote:
>> 
>> Consider the following example:
>> 
>> grant signedBy "jspwiki", 
>>   principal com.ecyrd.jspwiki.auth.authorize.Role "Authenticated" {
>>     permission com.ecyrd.jspwiki.auth.permissions.PagePermission
>> "*:Main",
>> "edit";
>>     permission com.ecyrd.jspwiki.auth.permissions.GroupPermission "*:*",
>> "edit";
>>     permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*",
>> "login";
>> 
>> }
>> 
>> If Jane, Murray and Swarup are authenticated users which means all these
>> three users can edit the Main page, but at some point of time I want the
>> user Swarup only to view the Main page but not edit the Main page.
>> How can I do that ?  you may say I can create a seperate group whose
>> members
>> can only view Main page
>> and make the user Swarup the member of this group, but I dont want to do
>> it
>> in that way.
>> Is there a way ?
>> 
>> 
>> Andrew Jaquith-2 wrote:
>> > 
>> > It is, but READ THE DOCUMENTATION PLEASE:
>> > 
>> > http://doc.jspwiki.org/2.4/wiki/Security#section-Security- 
>> > CustomizingJSPWikiSecurity
>> > 
>> > Andrew
>> > 
>> > On Aug 30, 2007, at 11:33 AM, Swarup123 wrote:
>> > 
>> >>
>> >> Its again a group of users and by default any member of the group  
>> >> can edit
>> >> i wanted to do it as one on one.
>> >> consider the following example:
>> >> ----------------------------
>> >> User     |  WikiPage |  Role   |
>> >> --------|------------------|
>> >> Jane     |  Main      | edit    |
>> >> Murray  |  Main      | view   |
>> >> Admin   |  Main      | delete |
>> >> Swarup |  Security | view   |
>> >> ----------------------------
>> >> this is something I am looking at..is this possible by any means in  
>> >> JSPWiki
>> >>
>> >>
>> >> Murray Altheim-2 wrote:
>> >>>
>> >>> Swarup123 wrote:
>> >>>> Hi,
>> >>>> How can I give permissions (view, edit, delete) to individual users
>> >>>> besides
>> >>>> using [{ALLOW view Janne}], bcoz if there are 100's of users I  
>> >>>> cant use
>> >>>> the
>> >>>> same. Is there a way to specify the roles of users.
>> >>>> plz suggest me..
>> >>>
>> >>> You'll want to create Groups and add specific users to those groups,
>> >>> then set the permissions based on the groups. There is, for example,
>> >>> an "Admin" group that has more permissions than non-group members,
>> >>> such as being able to delete pages.
>> >>>
>> >>> The new security documentation and the documentation on groups found
>> >>> on the wiki should provide all the information you need. If not,
>> >>> please ask again for the missing pieces and we'll try to improve the
>> >>> documentation.
>> >>>
>> >>> Thanks,
>> >>>
>> >>> Murray
>> >>>
>> >>> ..................................................................... 
>> >>> ......
>> >>> Murray Altheim <murray07 at altheim.com>                            
>> >>> ===  =
>> >>> =
>> >>> http://www.altheim.com/murray/                                      
>> >>> = =
>> >>> ===
>> >>> SGML Grease Monkey, Banjo Player, Wantanabe Zen Monk                
>> >>> = =  =
>> >>> =
>> >>>
>> >>>        Boundless wind and moon - the eye within eyes,
>> >>>        Inexhaustible heaven and earth - the light beyond light,
>> >>>        The willow dark, the flower bright - ten thousand houses,
>> >>>        Knock at any door - there's one who will respond.
>> >>>                                        -- The Blue Cliff Record
>> >>> _______________________________________________
>> >>> This is the Jspwiki-users mailing list, in which we discuss the
>> >>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
>> >>> For development discussion, please join jspwiki-dev.
>> >>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>> >>> http://www.jspwiki.org/JSPWikiMailingList
>> >>>
>> >>>
>> >>
>> >> -- 
>> >> View this message in context: http://www.nabble.com/UserPermissions- 
>> >> tf4354840.html#a12409777
>> >> Sent from the JspWiki - User mailing list archive at Nabble.com.
>> >>
>> >> _______________________________________________
>> >> This is the Jspwiki-users mailing list, in which we discuss the
>> >> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
>> >> For development discussion, please join jspwiki-dev.
>> >> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>> >> http://www.jspwiki.org/JSPWikiMailingList
>> > 
>> > _______________________________________________
>> > This is the Jspwiki-users mailing list, in which we discuss the 
>> > stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. 
>> > For development discussion, please join jspwiki-dev.
>> > http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>> > http://www.jspwiki.org/JSPWikiMailingList
>> > 
>> > 
>> 
>> -- 
>> View this message in context:
>> http://www.nabble.com/UserPermissions-tf4354840.html#a12410871
>> Sent from the JspWiki - User mailing list archive at Nabble.com.
>> 
>> _______________________________________________
>> This is the Jspwiki-users mailing list, in which we discuss the 
>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. 
>> For development discussion, please join jspwiki-dev.
>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>> http://www.jspwiki.org/JSPWikiMailingList
>> 
> 
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss the 
> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. 
> For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList
> 

-- 
View this message in context: http://www.nabble.com/UserPermissions-tf4354840.html#a12411251
Sent from the JspWiki - User mailing list archive at Nabble.com.