none

1 files changed, 29 insertions, 0 deletions

diff --git a/TWiki/TWikiAccessControl.mdwn b/TWiki/TWikiAccessControl.mdwn
index 09ce0195..48ee50d5 100644
--- a/TWiki/TWikiAccessControl.mdwn
+++ b/TWiki/TWikiAccessControl.mdwn
@@ -54,6 +54,35 @@ The same rules apply like the one for Access Control for Individual Topics; with
 * DENYTOPICCHANGE (in topic) overrides DENYWEBCHANGE (in %WEBPREFSTOPIC%)
 * ALLOWTOPICCHANGE (in topic) overrides ALLOWWEBCHANGE (in %WEBPREFSTOPIC%)
 
+### <a name="Rename_Access_Restriction_for_In"> Rename Access Restriction for Individual Topics </a>
+
+You can define restrictions of who is allowed to rename a topic. Note that users need this permission in addition to the CHANGE permission in order to rename a topic. They also need CHANGE access to change references in referring topics.
+
+Define one or both of these variables in a topic, preferably at the end of the topic:
+
+* Set DENYTOPICRENAME = &lt; list of users and groups &gt;
+* Set ALLOWTOPICRENAME = &lt; list of users and groups &gt;
+
+DENYTOPICCRENAME defines users or groups that **are not** allowed to rename the topic. It is a comma delimited list of users and groups. Example: <br /><code>    \* Set DENYTOPICRENAME = %MAINWEB%.SomeBadBoy, %MAINWEB%.SomeBadGirl, %MAINWEB%.SomeHackerGroup</code>
+
+ALLOWTOPICRENAME defines users or groups that **are** allowed to rename the topic. It is a comma delimited list of users and groups. Example: <br /><code>    \* Set ALLOWTOPICRENAME = %MAINWEB%.SomeGoodGuy, %MAINWEB%.SomeGoodGirl, %MAINWEB%.TWikiAdminGroup</code>
+
+DENYTOPICRENAME is evaluated before ALLOWTOPICRENAME. Access is denied if the authenticated person is in the DENYTOPICRENAME list, or not in the ALLOWTOPICRENAME list. Access is granted in case DENYTOPICRENAME and ALLOWTOPICRENAME is not defined.
+
+### <a name="Rename_Access_Restriction_for_a_"> Rename Access Restriction for a Whole %WIKITOOLNAME% Web </a>
+
+You can define restrictions of who is allowed to do renames for a %WIKITOOLNAME% web.
+
+Define one or both of these variable in the %WEBPREFSTOPIC% topic:
+
+* Set DENYWEBRENAME = &lt; list of users and groups &gt;
+* Set ALLOWWEBRENAME = &lt; list of users and groups &gt;
+
+The same rules apply like the one for Access Control for Individual Topics; with these additions:
+
+* DENYTOPICRENAME (in topic) overrides DENYWEBRENAME (in %WEBPREFSTOPIC%)
+* ALLOWTOPICRENAME (in topic) overrides ALLOWWEBRENAME (in %WEBPREFSTOPIC%)
+
 ### <a name="Read_Access_Restriction_for_a_Wh"> Read Access Restriction for a Whole %WIKITOOLNAME% Web </a>
 
 You can define restrictions of who is allowed to view a %WIKITOOLNAME% web.