<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Steven W. Orr wrote:
<blockquote cite="mid:4A88778F.5000707@syslang.net" type="cite">
<pre wrap="">
I created a page called (let's say) OurGroup. The content is
#acl StevenOrr:read,write,delete,revert
* StevenOrr
* FreddyFish
Then I *think* I want to say this at the top of every page that I want to
restrict. Is it sufficient to say this at the top of each of the pages?
#acl OurGroup:read,write,revert,admin All:
</pre>
</blockquote>
acl processing works as (from HelpOnAccessControlLists page):<br>
<ul>
<li>processing sequence: acl_rights_before, A/B/C/D,
[acl_rights_default], acl_rights_after</li>
<li>the <strong>first ACL matching the user is used<br>
</strong></li>
<li>acl_rights_default is <strong>what is done if no ACLs are used
on the page</strong></li>
</ul>
So, unless your acl_rights_before allows others, your acl will do what
you want. Also, you do not need to add the "All:" part unless the
acl_rights_after actually allows others.<br>
<blockquote cite="mid:4A88778F.5000707@syslang.net" type="cite">
<pre wrap="">
Will this do the trick?
Also, my acl_rights_default is currently set as:
acl_rights_default = u'Known:read,write,delete,revert All:read'
</pre>
</blockquote>
The acl_rights_default is ignored if your page includes an acl (third
point above).<br>
<blockquote cite="mid:4A88778F.5000707@syslang.net" type="cite">
<pre wrap="">
Can I assume that the presumption is that what I'm describing will work
*because* FreddyFish and myself will be logged in and therefore Known?
</pre>
</blockquote>
Not from what I can see. The members of OurGroup have access because
your acl allows it, which does not depend on acl_rights_default (which
follows your acl in the processing sequence, and is ignored because you
provide an acl).<br>
<br>
Hope this helps,<br>
John<br>
<br>
</body>
</html>