[Moin-user] How to allow editing only by logged in users?

Chris G cl at isbd.net
Mon Feb 8 13:30:09 EST 2010


On Mon, Feb 08, 2010 at 11:52:56AM -0600, Rick Vanderveer wrote:
>    Hey Chris,
>    What you want to do is leverage a couple Moin features:
> 
>     1. First is cosmetic - in your farmconfig.py file, switch your theme to
>    one of the available *_cms themes.  The point is so that non-logged users
>    are not seeing all the edit tools on the wiki. Included in Moin is the
>    modernized_cms, but several of us have also included CMS themes with our
>    custom ones as well ([1]http://moinmo.in/ThemeMarket), such as FixedLeft
>    and Moniker, among others.
> 
OK, that's an easy start.  :-)


>    2. Second step is to set the ACL so that All:read.  That way, even if
>    they're clever enough to append a page name with ?action=edit, it won't
>    let them.  Additional reference: 
>    [2]http://moinmo.in/HelpOnAccessControlLists
> 
OK, done that now too.  It does feel as if there should be an almost
'default' set up where only logged in users can do things though.


>    3. finally, controlling account creation.  What I've done on one of my
>    wiki's is set the TextCha to something only I know what the answer is. 
>    This is my "master password", so to speak.  Then, I create the accounts
>    for people and then add them to an 'edit' group that doesn't require
>    TextCha.  Add this to your farmconfig.py file:
>        textchas_disabled_group = u"TrustedGroup"   
>    And then create a TrustedGroup page (remember to also protect this page so
>    that only you can edit it).
>    see also:  [3]http://moinmo.in/HelpOnGroups
> 
Again it seems like a bit of a workaround for an omission, but still,
it works I guess.


>    This is a question that comes up periodically.  I've been meaning to make
>    a 'HowTo' about it for a while now.  I suppose this is a good start, I
>    think I'll create it now.
> 
:-)  Thanks for the help.

-- 
Chris Green





More information about the Moin-user mailing list