Re: UserPermissions

Swarup --

We are having some difficulty with your question because you are not  
asking it in a very clear manner. Your last message was much more  
clear. What I believe you want to do is this:

- Assign page privileges in a centralized way, and not on each page
- Assign privileges to individual users rather than groups

Both of these can be done in the jspwiki.policy file. The previous  
advice to you focused on granting privileges to particular groups and  
roles. But you can also specify privilege-grants to particular  
WikiPrincipals (i.e., user names). For example:

grant signedBy "jspwiki",
   principal com.ecyrd.jspwiki.auth.WikiPrincipal "John Doe" {
     permission com.ecyrd.jspwiki.auth.permissions.PagePermission  
"Main", "edit";
};

In this case, we are granting John Doe the right to edit the "Main"  
page. You can also add multiple permission grants for this user, too.

The website is meant to be a resource for users. If you had made a  
cursory search of jspwiki.org, you might have found a page like this:

http://jspwiki.org/wiki/Security2.4Howto

...that documents how to do this quite clearly.


Andrew


On Aug 30, 2007, at 2:37 PM, Swarup123 wrote:

>
> I am sorry if I am asking something repeatedly but you are again  
> going back
> to groups.
> anyways my final question - Is there a way to handle per page and per
> user(not group of users) ACL in JSPWiki besides using groups. What  
> exactly I
> mean is we need to assign permissions(view, edit etc)
> to each and every user for each and every page and not in [{ALLOW edit
> Janne, Swarup}] this way bcoz everyone can view others permissions  
> which is
> not good.The tables WIKI_PAGE, USERS, ROLES should be normalized or  
> have
> proper references between them. I am unable to understand how to  
> map these
> tables. Could you please guide me. Or is there a way to do that.
>
> -swarup
>
>
> Janne Jalkanen wrote:
>>
>>
>> Please read the documentation about groups.
>>
>> /Janne
>>
>> On 30 Aug 2007, at 21:06, Swarup123 wrote:
>>
>>>
>>> change the previous [{ALLOW view Janne, Swarup}] to [{ALLOW edit
>>> Janne,
>>> Swarup}] keeping everything same, in such scenario we cannot  
>>> solve the
>>> problem right ? Moreover when there are 1000's of users, it is
>>> difficult to
>>> judge whom we can trust or whom we cannot trust. What can we do  
>>> then ?
>>>
>>> Swarup
>>>
>>>
>>> Janne Jalkanen wrote:
>>>>
>>>>> for now lets keep aside jspwiki.policy and consider per page ACL.
>>>>> If there is
>>>>> a page called Main and on the top this page user Jane writes
>>>>> [{ALLOW view
>>>>> Janne, Swarup}] which means only Janne and Swarup can view this
>>>>> page and not
>>>>> the other users but the user Swarup again modifies it to
>>>>> [{ALLOW view Janne, Swarup, Murray}]  which is not liked by Jane.
>>>>> So how can we resolve such conflicts ?
>>>>
>>>> You cannot.  If you do not trust Swarup, do not give him edit  
>>>> rights.
>>>>
>>>> (Note that if Swarup only has view rights, he cannot change the  
>>>> page
>>>> - he needs the "edit" permission.)
>>>>
>>>> /Janne
>>>> _______________________________________________
>>>> This is the Jspwiki-users mailing list, in which we discuss the
>>>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
>>>> For development discussion, please join jspwiki-dev.
>>>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>>>> http://www.jspwiki.org/JSPWikiMailingList
>>>>
>>>>
>>>
>>> -- 
>>> View this message in context: http://www.nabble.com/UserPermissions-
>>> tf4354840.html#a12412925
>>> Sent from the JspWiki - User mailing list archive at Nabble.com.
>>>
>>> _______________________________________________
>>> This is the Jspwiki-users mailing list, in which we discuss the
>>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
>>> For development discussion, please join jspwiki-dev.
>>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>>> http://www.jspwiki.org/JSPWikiMailingList
>>
>> _______________________________________________
>> This is the Jspwiki-users mailing list, in which we discuss the
>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
>> For development discussion, please join jspwiki-dev.
>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>> http://www.jspwiki.org/JSPWikiMailingList
>>
>>
>
> -- 
> View this message in context: http://www.nabble.com/UserPermissions- 
> tf4354840.html#a12413504
> Sent from the JspWiki - User mailing list archive at Nabble.com.
>
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss the
> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
> For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList