Mailing-List: contact jspwiki-user-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: jspwiki-user@incubator.apache.org
Received-SPF: pass (athena.apache.org: domain of Janne.Jalkanen@ecyrd.com
 designates 193.64.5.122 as permitted sender)
Message-Id: <5FC1E7A6-0A42-4AE8-AD31-61F59AE2B5EB@ecyrd.com>
From: Janne Jalkanen <Janne.Jalkanen@ecyrd.com>
To: jspwiki-user@incubator.apache.org
In-Reply-To: 
 <857A26F4E01F6546A056F1EE7604F0E201D699B740@N060XBOXPCMS01.kroger.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v930.3)
Subject: Re: ALLOW tag not working properly
Date: Thu, 12 Feb 2009 19:59:34 +0200
References: 
 <857A26F4E01F6546A056F1EE7604F0E201D6822D49@N060XBOXPCMS01.kroger.com>
 <3a6c97f00902100925l2e85cf97i1c891d5d1fac3a2c@mail.gmail.com>
 <857A26F4E01F6546A056F1EE7604F0E201D699B740@N060XBOXPCMS01.kroger.com>

> But I guess I'm a little confused about the way the [{ALLOW view  
> userid}] functions.   Since it is part of the JSPWiki page text, I  
> would think it would have to be processed at the level where the  
> page is being viewed, not through the security setup.   The security  
> setup would decide whether a user is allowed to view or edit pages  
> in general.   I would imagine that the [{ALLOW view userid}] tag  
> works after a user is attempting to pull up the page in question -  
> more at the JSPWiki level than at the security level.


Well, whenever the page is changed, we parse the text and find all  
ALLOW statements, then store them in the page ACL.  And yeah, the  
security subsystem first checks the ACLs before the page content is  
even read.

/Janne