Block all access to media manager for @ALL (but open for logged in user)

johanekdahl

Greetings!

I have recently set up DokuWiki to run a simple web-site (the idea of-course being that I can edit easily from anywhere). I am the only registered user - all others read as user @ALL. This way I can edit pages, but block access to them until I am done. Works like a charm.

The media manager still seems accessible to @ALL though, and I don't want. Is there a way to restrict access to it? (Essentially as if I could create an ACL entry for it granting permission "None" to @ALL).

I will eventually start tinkering with templates/source to actually remove links to e.g. media manager when @ALL is reading, but until then I'd like some way to deny everyone from seeing the all media contents - some of it might not be meant for the eyes of the public
just yet.

Best regards,
Johan Ekdahl

[Edited to correct several errors]

taggic

I have recently set up MediaWiki to run a simple ...

Are you sure to post to the right Forum ?

The media center still seems accessible to @ALL though, and I don't want.

How did you check this ?
What are the file permissions for your data folders (check with an ftp client) ?

johanekdahl

Gaaah! It's a DokuWiki, of-course! Sorry for the confusion!

(My first attempt at setting up such a site was actually with MediaWiki, but it turned out to be much more complex than I wanted. I stumbled upon DokuWiki and liked what I saw. And I still like it.)

And it's Media Manager, and nothing else. Not a good evening concentration-wise - obviously.

If, with those corrections, the question about how I did check the availability still is valid then that is straight forward: Log out, Media Manager is still click-able, and I can see uploaded files.

Again, sorry for the confusion..

--Johan

taggic

Depends on the target audience of your wiki. Will it be a closed wiki (registered users only) ?
Some of the templates (e.g. arctic) provide a config: "Hide all wiki actions to non logged in users".

The MediaManager should not open in the event you have a closed wiki (done by ACL) and using the dokuwiki standard template.
If you have an open wiki, where ALL users can read the content, logically the MediaManager will display all media files.
If ALL-group member have read permission on root but a sub namespace without any permission, then the pictures of this sub namespace will not be shown. The following message will apear: "Sorry, you don't have enough rights to read files."

Either your ACL is not 100% correct or we have a misunderstanding how ACL impacts DokuWiki.

johanekdahl

Oh, I see..

Namespaces apply to uploaded files also. Didn't see/realize that.

So, while @ALL can get into the Media Manager, they can not see files in namespaces where I denied them access.

Good enough for now. Ideally I'd like the Media Manager to be totally invisible for @ALL (no link at the top, no way to get there by tinkering with the URL...) just as I'd like to get rid of other things that they should not have any use for. I'll get to that, but right now, I need to concentrate more on content than looks.

Thank you for the quick response!

Best regards,
Johan Ekdahl

perhop

Johan, have you found out how you get the Media Manager invisible for @all users?
Have the same problem and want the Media Manager link to disappear for non register users

turnermm

Place the following php around the HTML/php code which outputs the media manager button or link:
if(isset($INFO['userinfo'])){ }

For instance, in the new dokuwiki template, you will find the following in tpl_header.php:

                <?php
                    tpl_action('recent', 1, 'li');
                    tpl_action('media', 1, 'li');
                    tpl_action('index', 1, 'li');
                ?>

Change it to:

              <?php
                    global $INFO; 
                    tpl_action('recent', 1, 'li');
                    if(isset($INFO['userinfo'])){
                        tpl_action('media', 1, 'li');
                   }      
                    tpl_action('index', 1, 'li');
                ?>

Global DokuWiki Links