[pmwiki-users] Help :How to hide command buttons from normal viewers, but not from administrators ?

[michael paulukonis]

Not showing the buttons will not prohibit visitors from performing the
actions.
the buttons are shortcuts for appending "?action=edit" or "?action=login"
to the url.
You must restrict those actions to administrators or other authenticated
users to prohibit visitors from performing them.
for more information on authenticating users, please see
http://www.pmwiki.org/wiki/PmWiki/AuthUser

These links go into something like Site.PageActions or Group.PageActions,
depending upon your template and setup.
For more information on PageActions, please see
http://www.pmwiki.org/wiki/PmWiki/SitePageActions


you might also find some useful info @
http://www.pmwiki.org/wiki/Cookbook/PmWikiAsACMS

-Michael Paulukonis
http://www.xradiograph.com
<http://goog_2112721603>Interference Patterns (a
blog)<http://www.xradiograph.com%5Cinterference>
@XraysMonaLisa <https://twitter.com/XraysMonaLisa>
http://michaelpaulukonis.com
<http://www.BestAndroidResources.com>

Sent from somewhere in the Cloud
(hearthrug, by the fender)


On Fri, Jun 21, 2013 at 9:51 AM, Thant Sin Lin <tslin.ucsy at gmail.com> wrote:

> Thanks for the reply.
>
> These markups (: :)  are for pages, right?
> Then, I have to add them at every pages?
>
> Can I do this in my skin_name.tmpl file? I moved command buttons out of
> the div "wikibody".
>
> And on the first load, I haven't fill in edit password and I am not
> authenticated. So, those buttons don't appear.
> Then, how am I fill password for administrator? Normally, I can enter
> password when I click on edit link (if i set edit password).
>
> If I am approaching in wrong way, please advise me.
> We are using pmwiki to build a documentation page for our product.
> We don't want normal visitors to make any changes. (No edit, No print, No
> history, No command buttons).
> We want to allow only administrators to do those actions (see thos
> buttons).
>
>
> Thanks and best regards,
> Robin
>
>
> On Fri, Jun 21, 2013 at 9:12 PM, michael paulukonis <
> xraysmalevich at gmail.com> wrote:
>
>> What you are looking for is to have the actions available via shortcut
>> keys, but NOT make the links visible when not authorized, correct?
>> As once the edit-action is undertaken, the user will be prompted for
>> authorization.
>>
>> What I do is something like the following:
>>
>>
>> (:if auth edit:)
>> * %item rel=nofollow class=rename
>> accesskey='$[ak_edit]'%[[{*$FullName}?action=edit|$[edit]]]
>> (:if ! auth edit:)
>> %item rel=nofollow class=rename
>> accesskey='$[ak_edit]'%[[{*$FullName}?action=edit|]]
>>
>>
>> If it's unclear, at the end of the "! auth eidt" link -- there's no text.
>> so nothing appears, but the access-key is still present.
>> There's no visibility to toggle it on, however.
>>
>>
>>
>> -Michael Paulukonis
>> http://www.xradiograph.com
>> <http://goog_2112721603>Interference Patterns (a blog)<http://www.xradiograph.com%5Cinterference>
>> @XraysMonaLisa <https://twitter.com/XraysMonaLisa>
>> http://michaelpaulukonis.com
>> <http://www.BestAndroidResources.com>
>>
>> Sent from somewhere in the Cloud
>> (hearthrug, by the fender)
>>
>>
>> On Fri, Jun 21, 2013 at 6:06 AM, tamouse mailing lists <
>> tamouse.lists at gmail.com> wrote:
>>
>>>
>>> On Jun 21, 2013 2:38 AM, "Thant Sin Lin" <tslin.ucsy at gmail.com> wrote:
>>> >
>>> > Hello,
>>> >
>>> > I need to toggle visibility of command buttons "edit, history, etc...".
>>> >
>>> > Eg. if my page is www.mypmwiki.com, everyone visit that page don't
>>> see command buttons.
>>> > If I enter www.mypmwiki.com/administrator, I want to see command
>>> buttons.
>>> > Of course, even I access from second URL, I have to fill password.
>>> >
>>> > I know I can remove or hide command buttons from template file.
>>> > But doing like this prevent everyone from editing pages including
>>> administrators.
>>> >
>>> > I loaded my pmwiki site inside iframe of my Main site.
>>> > So I cannot edit pages by adding "?action" to URL.
>>> >
>>> > I don't want to create another pmwiki site for administrator and
>>> publich changes to live site everytime by copying wiki.d folder.
>>> > It's Ok to create another pmwiki site if not require to copy wiki.d
>>> folder manually everytime I made changes.
>>> >
>>> > Please let me know how can I achieve this.
>>> > I surfed the web for a long time and still can't find the solution.
>>> >
>>> > Thanks in advanced.
>>> > Robin
>>> >
>>> > _______________________________________________
>>> > pmwiki-users mailing list
>>> > pmwiki-users at pmichaud.com
>>> > http://www.pmichaud.com/mailman/listinfo/pmwiki-users
>>> >
>>>
>>> I don't know how you manage authorization, but wrapping the buttons for
>>> admin use only is generally done like so:
>>>
>>> (:if auth edit:)
>>> ... button stuff...
>>> (:ifend:)
>>>
>>> also, you should have an edit password. A user can read the page source
>>> snd see the path in your iframe, and bypass your main site without
>>> precautions.
>>>
>>> _______________________________________________
>>> pmwiki-users mailing list
>>> pmwiki-users at pmichaud.com
>>> http://www.pmichaud.com/mailman/listinfo/pmwiki-users
>>>
>>>
>>
>
>
> --
> Thant Sin Lin
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.pmichaud.com/pipermail/pmwiki-users/attachments/20130621/2f5a7425/attachment-0001.html>