diff options
| -rw-r--r-- | TWiki/TWikiAccessControl.mdwn | 20 |
1 files changed, 16 insertions, 4 deletions
diff --git a/TWiki/TWikiAccessControl.mdwn b/TWiki/TWikiAccessControl.mdwn index 91b146e3..878658f2 100644 --- a/TWiki/TWikiAccessControl.mdwn +++ b/TWiki/TWikiAccessControl.mdwn @@ -41,14 +41,14 @@ A user is created by with the [[TWikiRegistration]] form. The process generates Groups are defined by group topics in the <code>**%MAINWEB%**</code> web, like the %MAINWEB%.TWikiAdminGroup. To start a new group: -1. **Create** a new topic with A name that ends in **Group**, `SomeGroup` +1. **Create** a new topic with A name that ends in **Group**, <code>SomeGroup</code> 2. **Define** two variables: * Set GROUP = < list of users and groups > * Set ALLOWTOPICCHANGE = < list of users and groups > -* * GROUP is a comma-separated list of users and of other groups:<br /><code>** \* Set GROUP = %MAINWEB%.SomeUser, %MAINWEB%.OtherUser, %MAINWEB%.SomeOtherGroup**</code> +* GROUP is a comma-separated list of users and of other groups:<br /><code>** Set GROUP = %MAINWEB%.SomeUser, %MAINWEB%.OtherUser, %MAINWEB%.SomeOtherGroup**</code> -* * ALLOWTOPICCHANGE defines who is allowed to change the group topic; it is a comma delimited list of users and groups. You typically want to restrict that to the members of the group itself, so it should contain the name of the topic,<br /><code> \* Set ALLOWTOPICCHANGE = %MAINWEB%.TWikiAdminGroup</code><br /> for the TWikiAdminGroup topic. (This prevents users not in the group from editing the topic and from gaining unauthorized membership to the group.) +* ALLOWTOPICCHANGE defines who is allowed to change the group topic; it is a comma delimited list of users and groups. You typically want to restrict that to the members of the group itself, so it should contain the name of the topic,<br /><code>** Set ALLOWTOPICCHANGE = %MAINWEB%.TWikiAdminGroup**</code><br /> for the TWikiAdminGroup topic. (This prevents users not in the group from editing the topic and from gaining unauthorized membership to the group.) ## <a name="Restricting_Write_Access"> Restricting Write Access </a> @@ -137,6 +137,18 @@ You can define restrictions of who is allowed to view a %WIKITOOLNAME% web. * Set NOSEARCHALL = on * It is not recommended to restrict view access to individual topics since all content is searchable _within_ a web. +## <a name="Hiding_Control_Settings"> Hiding Control Settings </a> + +* %T% To hide access control settings from normal browser viewing, place them in comment markers. + +> <!-- +> +> <br /> +> +> Set +> +> DENYTOPICCHANGE = Main.SomeGroup<br /> --> + <a name="SuperAdminGroup"></a> ## <a name="The_SuperAdminGroup"> The SuperAdminGroup </a> @@ -149,4 +161,4 @@ By mistyping a user or group name in the ALLOWTOPICCHANGE setting, it's possible * The default setting is not to have superusers. --- [[PeterThoeny]] - 16 Mar 2001 <br /> -- [[AndreaSterbini]] - 11 Apr 2001 <br /> +-- [[Main/MikeMannix]] - 02 Dec 2001 |