incubator-jspwiki-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Murray Altheim <>
Subject Re: Control access to page according to its name pattern
Date Fri, 30 May 2008 04:46:06 GMT
Janne Jalkanen wrote:
> On 30 May 2008, at 01:47, Murray Altheim wrote:
>> Andrew Jaquith wrote:
>>> JSPWiki security policies cannot express concepts like "allow access 
>>> to everything EXCEPT page X." What you will have to do is use ACLs on 
>>> pages that begin with "Private" to restrict access to the groups you 
>>> want.
>>> Future versions of JSPWiki will have the concept of "spaces," which 
>>> will address this issue more gracefully.
>> Andrew,
>> This got me thinking and while I don't have the time to do the work
>> I can see a somewhat simple solution to this via a plugin. What I'd
>> do is design a plugin that:
> Why write a WikiPlugin?  Wouldn't it be more logical to build your own 
> AclManager?  It's only four methods, and with those you can pretty much 
> control everything...  You could have an AclManager which uses regexps 
> to control the access.


Good point. I had previously written a "PassThroughAuthorizer" that
let everything through, and a regex-based one would be equally easy.



Murray Altheim <murray07 at>                           ===  = =                                     = =  ===
SGML Grease Monkey, Banjo Player, Wantanabe Zen Monk               = =  = =

       Boundless wind and moon - the eye within eyes,
       Inexhaustible heaven and earth - the light beyond light,
       The willow dark, the flower bright - ten thousand houses,
       Knock at any door - there's one who will respond.
                                       -- The Blue Cliff Record

View raw message