<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; "><BR><DIV><DIV>On Oct 2, 2006, at 3:36 PM, Mike wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"><P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Comic Sans MS" size="3" style="font: 12.0px Comic Sans MS">It would already be helpful if either</FONT></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Comic Sans MS" size="3" style="font: 12.0px Comic Sans MS">* there way a way in AuthUser to see at least the users who have certain</FONT></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Comic Sans MS" size="3" style="font: 12.0px Comic Sans MS">rights on certain pages, or if</FONT></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Comic Sans MS" size="3" style="font: 12.0px Comic Sans MS">* the whole password mechanism moved from action=attr to some</FONT></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Comic Sans MS" size="3" style="font: 12.0px Comic Sans MS">administrator-only config file. Similarly to how we can set default</FONT></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Comic Sans MS" size="3" style="font: 12.0px Comic Sans MS">passwords in the config.php, maybe we can also set passwords for</FONT></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Comic Sans MS" size="3" style="font: 12.0px Comic Sans MS">page/group/site (differentiated by read/edit/upload/attr)?</FONT></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Comic Sans MS; min-height: 16.0px"><BR></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Comic Sans MS" size="3" style="font: 12.0px Comic Sans MS">Would be great. Where is the whole password stuff stored anyway?</FONT></P> </BLOCKQUOTE></DIV><BR><DIV>Out of the box? In the page data behind the scenes or in the config.php file.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Options exist for PmWiki to use .htpasswd, MySQL/PostgreSQL, LDAP, etc.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>More options are coming.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>But in most methods the original password is no longer available. It's more secure that way. The password is encrypted when you encode it.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>In the config.php method, which is only reliable for site-wide passwords, it can be left plaintext.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Crisses</DIV></BODY></HTML>