tomkhagai
Hi,
after reading a lot of docs i still can't figure out how to achieve the following behaviour:
I set the permission for @ALL to NONE, also permissions for root access to NONE, and only allow access for specific groups and users to sopecific pages. That works - but how do i concurrently allow READ access for all or specific users to the media directory? The ACLs for this directory seem to be inherited from the setting for @ALL.
Regards,
Tom
dominik
the access to the media files are equal to the acl for the wiki pages.
tomkhagai
Hi Dominik,
thank you.
So a user which can read ONE page with embeds media can also read all other pages (when he knows the page id of another page), cause i can not forbid globally that the default should be no read access to any page?
Again, a little bit mor worked out:
User A is able to read ony PAGE_A, which embeds a file to download from the media directory. To allow him to download the file i have to give him read access to all pages, or allowing @ALL red access to all pages, or setting root access to READ for everyone, cause i can not specifically restrict read access for his account to only PAGE_A and the media directory. So if he knows theres a PAGE_B he can also read this page.
This seems to be a little bit odd and unflexible to me.
Regards,
Tom
chi
Upload the media files in the respective namespaces. The media directory inherits the ACLs of the namespaces. If you restrict foo:bar:* to readonly /media/foo/bar will be readonly as well. It makes no sense to have different access levels and put all media files in the root namespace at the same time.
tomkhagai
Thank you, chi - i will try that, should work!
Supplement July 30 2010:
It works, but i had to also shift all pages from the root namespace to their own namespaces.
Example:
File A now in media/NS1
Page A now in pages/NS1, refers to File A
@ALL no access for root namespace
@USER no access for root namespace
Acess for user foo set to READ for NS1 =>
foo can access Page A and download File A, but can not access any other page