Re: UserPermissions

Swarup123 <[email protected]> Thu, 30 Aug 2007 12:40:22 -0700 (PDT)
Newsgroups gmane.comp.java.jspwiki.user
Message-ID <[email protected]>
exactly this is what I was asking or looking at
- Assign page privileges in a centralized way, and not on each page
- Assign privileges to individual users rather than groups

I did not know that we can grant privileges to individual users llike

grant signedBy "jspwiki",
   principal com.ecyrd.jspwiki.auth.WikiPrincipal "John Doe" {
     permission com.ecyrd.jspwiki.auth.permissions.PagePermission  
"Main", "edit";
};

i was just thinking that they are handling groups. anyways i got you..Thanks
Andrew and all

Swarup



Andrew Jaquith-2 wrote:
> 
> Swarup --
> 
> We are having some difficulty with your question because you are not  
> asking it in a very clear manner. Your last message was much more  
> clear. What I believe you want to do is this:
> 
> - Assign page privileges in a centralized way, and not on each page
> - Assign privileges to individual users rather than groups
> 
> Both of these can be done in the jspwiki.policy file. The previous  
> advice to you focused on granting privileges to particular groups and  
> roles. But you can also specify privilege-grants to particular  
> WikiPrincipals (i.e., user names). For example:
> 
> grant signedBy "jspwiki",
>    principal com.ecyrd.jspwiki.auth.WikiPrincipal "John Doe" {
>      permission com.ecyrd.jspwiki.auth.permissions.PagePermission  
> "Main", "edit";
> };
> 
> In this case, we are granting John Doe the right to edit the "Main"  
> page. You can also add multiple permission grants for this user, too.
> 
> The website is meant to be a resource for users. If you had made a  
> cursory search of jspwiki.org, you might have found a page like this:
> 
> http://jspwiki.org/wiki/Security2.4Howto
> 
> ...that documents how to do this quite clearly.
> 
> 
> Andrew
> 
> 
> On Aug 30, 2007, at 2:37 PM, Swarup123 wrote:
> 
>>
>> I am sorry if I am asking something repeatedly but you are again  
>> going back
>> to groups.
>> anyways my final question - Is there a way to handle per page and per
>> user(not group of users) ACL in JSPWiki besides using groups. What  
>> exactly I
>> mean is we need to assign permissions(view, edit etc)
>> to each and every user for each and every page and not in [{ALLOW edit
>> Janne, Swarup}] this way bcoz everyone can view others permissions  
>> which is
>> not good.The tables WIKI_PAGE, USERS, ROLES should be normalized or  
>> have
>> proper references between them. I am unable to understand how to  
>> map these
>> tables. Could you please guide me. Or is there a way to do that.
>>
>> -swarup
>>
>>
>> Janne Jalkanen wrote:
>>>
>>>
>>> Please read the documentation about groups.
>>>
>>> /Janne
>>>
>>> On 30 Aug 2007, at 21:06, Swarup123 wrote:
>>>
>>>>
>>>> change the previous [{ALLOW view Janne, Swarup}] to [{ALLOW edit
>>>> Janne,
>>>> Swarup}] keeping everything same, in such scenario we cannot  
>>>> solve the
>>>> problem right ? Moreover when there are 1000's of users, it is
>>>> difficult to
>>>> judge whom we can trust or whom we cannot trust. What can we do  
>>>> then ?
>>>>
>>>> Swarup
>>>>
>>>>
>>>> Janne Jalkanen wrote:
>>>>>
>>>>>> for now lets keep aside jspwiki.policy and consider per page ACL.
>>>>>> If there is
>>>>>> a page called Main and on the top this page user Jane writes
>>>>>> [{ALLOW view
>>>>>> Janne, Swarup}] which means only Janne and Swarup can view this
>>>>>> page and not
>>>>>> the other users but the user Swarup again modifies it to
>>>>>> [{ALLOW view Janne, Swarup, Murray}]  which is not liked by Jane.
>>>>>> So how can we resolve such conflicts ?
>>>>>
>>>>> You cannot.  If you do not trust Swarup, do not give him edit  
>>>>> rights.
>>>>>
>>>>> (Note that if Swarup only has view rights, he cannot change the  
>>>>> page
>>>>> - he needs the "edit" permission.)
>>>>>
>>>>> /Janne
>>>>> _______________________________________________
>>>>> This is the Jspwiki-users mailing list, in which we discuss the
>>>>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
>>>>> For development discussion, please join jspwiki-dev.
>>>>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>>>>> http://www.jspwiki.org/JSPWikiMailingList
>>>>>
>>>>>
>>>>
>>>> -- 
>>>> View this message in context: http://www.nabble.com/UserPermissions-
>>>> tf4354840.html#a12412925
>>>> Sent from the JspWiki - User mailing list archive at Nabble.com.
>>>>
>>>> _______________________________________________
>>>> This is the Jspwiki-users mailing list, in which we discuss the
>>>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
>>>> For development discussion, please join jspwiki-dev.
>>>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>>>> http://www.jspwiki.org/JSPWikiMailingList
>>>
>>> _______________________________________________
>>> This is the Jspwiki-users mailing list, in which we discuss the
>>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
>>> For development discussion, please join jspwiki-dev.
>>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>>> http://www.jspwiki.org/JSPWikiMailingList
>>>
>>>
>>
>> -- 
>> View this message in context: http://www.nabble.com/UserPermissions- 
>> tf4354840.html#a12413504
>> Sent from the JspWiki - User mailing list archive at Nabble.com.
>>
>> _______________________________________________
>> This is the Jspwiki-users mailing list, in which we discuss the
>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
>> For development discussion, please join jspwiki-dev.
>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>> http://www.jspwiki.org/JSPWikiMailingList
> 
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss the 
> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. 
> For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList
> 
> 

-- 
View this message in context: http://www.nabble.com/UserPermissions-tf4354840.html#a12414557
Sent from the JspWiki - User mailing list archive at Nabble.com.