jspwiki-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dirk Frederickx <dirk.frederi...@gmail.com>
Subject Re: Role Protecting Certain Wiki Sections?
Date Wed, 10 Jul 2019 20:26:42 GMT
Hi Jerry,

AFAIK you can only protect whole pages in JSPWiki, with a page ACL.
EG:  [{ALLOW edit Authenticated }]

You could put sensitive sections inside an IF plugin  which will only
render for certain Users or certain user Groups.
See https://jspwiki-wiki.apache.org/Wiki.jsp?page=IfPlugin for more
examples.
(note: looking at the source of the page will still reveal the protected
content,  so this approach is not 100% secure.

You can also put the protected content in another page, eg. by using the
InsertPagePlugin plugin.
This other page will then contain an [{ALLOW ... }] ACL to define the right
security rules. The access to that page will always pass via the security
gates of JSPWiki before revealing its content to the user.

BR
dirk


On Tue, Jul 9, 2019 at 6:44 PM Jerry Malcolm <techstuff@malcolms.com> wrote:

> Is it possible to make certain sections/pages of the Wiki protected from
> view and edit by a special role and other sections/pages protected by a
> different role?
>
> Thx
>
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message