Example ¶
# acl.default.php # <?php exit()?> # Please don't modify the lines above # # A sample Access Control Lists file for Moniwiki # # $Id: MoniWikiACL,v 1.4 2008/12/18 01:50:29 root Exp root $ @Guest Anonymous * @ALL deny * * @ALL allow ticket * @User allow * # some pages are allowed to edit WikiSandBox @Guest allow edit,info,diff #* Anonymous deny * # some POST actions support protected mode using admin password * @ALL protect deletefile,deletepage,rename,rcspurge,rcs,chmod,backup,restore # some actions allowed to @ALL * @ALL allow read,userform,rss_rc,aclinfo,fortune,deletepage,fixmoin,ticket # some pages have restrict permission MoniWiki @ALL deny edit,uploadfile,diff
User define @Group and @Group priority ¶
##@groupname userlist [priority] @Guest Anonymous # default group priority is 2 @Kiwirian foobar,kiwi,hello123 20 # @Kiwirain group
ACL entry type ¶
- allow
- deny
- protect: protect some password protected POST actions (not all actions are protectable)
with same priority ¶
Last ACL entry is used.
- allow * + deny * = deny *
- deny * + allow * = allow *
- deny * + allow edit,info = only edit,info available
- allow * + deny info,diff =
with different priority ¶
@Group1 peter,john 20 # priority = 20 @Group2 simon,soo # default group priorty = 2 * @ALL allow * # group priority = 1 * @ALL deny backup,restore * @Guest deny * # group priority = 2 * @Group1 deny * # User defined @Group1 group * @Group1 allow read,info,diff * @Group2 deny info,diff
- peter and john: allow read,info,diff + deny *
- Anonymous (@Guest): deny *
- all other registered users: Order Deny,Allow - deny backup,resotre + allow *
- @Group1 : Order Allow,Deny - allow read,info,diff + deny *
- @Group2 : deny info,diff + @ALL deny backup,restore + allow *
![/!\](/imgs/smile/alert.png "/!\")
merge all ACL entries with same group priority.
Example 2 ¶
Add the below in config.php file:
:
$security_class='acl';
$wikimasters=array('someone','someoneelse');
$owners=array('someone','someoneelse');
$acl_type='test'; # acl.test.php in config/ directory
put acl.test.php with the below content in ./config directory.
<?php
# group set
@Guest Anonymous
@User
@wAdmin someone,someoneelse 20
@Wikimaster someone,someoneelse 20
# group permission
* @Guest deny *
* @Guest allow read,comment,userform,print,fullsearch,info,diff,rss_rc
* @User allow *
* @User deny deletepage
* @wAdmin allow *
?>
