[Moin-user] acl problem

[Eric Johnson]

Hi Kai,

I would suspect that in a typical setup, Admins will have access to the
backend storage anyway. Doesn't really matter if you restrict their
access to the front-end HTML view of MoinMoin, because they could just
go look at the raw data on the back-end.

If you do get the server admins != MoinMoin admins, then you might work
around this issue by playing with the acl_rights_before and
acl_rights_default settings, and make Admin access a "default" state.

Seems like you're playing loosely with the notion of "admin", if, in
fact "admin" cannot work with all pages in the wiki - fixing broken
links, fixing access control lists (what if you decided to leave your
job - who would fix the ACLs on your page?), deleting stale pages,
renaming badly named pages, etc.

In my company, we've dealt with this by setting up a farm, and different
wikis in the farm have different administrators.

Alternately, if this really is for personal content, could you just set
up a MoinMoin personal instance?

-Eric.

Kai Jaeger wrote:
> Given that I want to hide a certain page from anybody else in a wiki,
> even admins, I expected this on the page:
>
> #acl KaiJaeger:read,write,admin,delete,revert All:
>
> or this
>
> #acl KaiJaeger:read,write,admin,delete,revert
> -All:read,write,admin,delete,revert
>
> to work appropriately, but it doesn't: Admins still can see the page.
>
> Advice is welcome
>
> Kai
>
> ------------------------------------------------------------------------------
> Come build with us! The BlackBerry(R) Developer Conference in SF, CA
> is the only developer event you need to attend this year. Jumpstart your
> developing skills, take BlackBerry mobile applications to market and stay 
> ahead of the curve. Join us from November 9 - 12, 2009. Register now!
> http://p.sf.net/sfu/devconference
> _______________________________________________
> Moin-user mailing list
> Moin-user at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/moin-user
>