[pmwiki-devel] PmWiki security

[Petko Yotov]

On Wednesday 26 August 2009 13:07:16 Simon wrote:
> Good point, thankyouso long since I have been there.
> Does raise an interesting point though, should the edit action be disabled
> for that page?

If we lock that page for editing, the whole group will be locked. :-) So, 
probably, no it shouldn't.

Some wikis may use this page for some group attributes/settings/PTVs or even 
headers/footers, which are stored in the page text content.

Petko

> 2009/8/26 Hans <design5 at softflow.co.uk>
> >  Wednesday, August 26, 2009, 11:47:14 AM, Simon wrote:
> > When I try to access a GroupAttributes page
> > instead of opening the expected form
> > it opens a "new" page
> > http://www.pmwiki.org/wiki/PmWiki/GroupAttributes?action=edit
> >
> > I think you want to use  action=attr, not  action=edit:
> >
> >    GroupName.GroupAttributes?action=attr