[pmwiki-users] pmwiki-users Digest, Vol 37, Issue 13
David Bourne
david at boomer.org
Thu Jul 10 09:46:25 CDT 2008
Send pmwiki-users mailing list submissions to
pmwiki-users at pmichaud.com
To subscribe or unsubscribe via the World Wide Web, visit
http://www.pmichaud.com/mailman/listinfo/pmwiki-users
or, via email, send a message with subject or body 'help' to
pmwiki-users-request at pmichaud.com
You can reach the person managing the list at
pmwiki-users-owner at pmichaud.com
When replying, please edit your Subject line so it is more specific
than "Re: Contents of pmwiki-users digest..."
Today's Topics:
1. foxnotify delete (adam overton)
2. Re: new (WikiSh) recipe for creating numbered sub-pages (Hans)
3. Re: foxnotify delete (Hans)
4. Re: Semi-automatic user accounts for fox forum --
Htpasswdform (Hans)
5. UploadMaxSize - correct units? (adam overton)
6. Re: Semi-automatic user accounts for fox forum --
Htpasswdform (Eemeli Aro)
7. Re: foxnotify delete (adam overton)
----------------------------------------------------------------------
Message: 1
Date: Wed, 9 Jul 2008 19:48:47 -0700
From: adam overton <a at plus1plus1plus.org>
Subject: [pmwiki-users] foxnotify delete
To: pmwiki-users <pmwiki-users at pmichaud.com>
Message-ID: <C6A2711A-B81B-4CEC-A554-CC2916753310 at plus1plus1plus.org>
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
hi hans
i'm having trouble with the following situation:
an individual user on my site is currently able to go to his/her page
(UserGroupA/UserGroupA-Notify) to use a form to add their
notification email for their group. this works successfully and
emails are being added. the notification code from FoxNotifyLists/
UserGroupA is included at the bottom of this page and shows the line
with delete link...
however, when this user then tries to click the 'delete' link, they
are redirected to FoxNotifyLists/UserGroupA, which displays the same
foxnotify line with a delete link at the end. the line has not been
deleted. continued clicking on this delete link results in simply
reloading this page with no change.
my setup:
- i've just updated to the last fox and foxnotify, with no change in
response
- each user has their own password which gives them 'edit' access to
their group
** when the permission for the FoxNotifyLists groupattributes is
set to @_site_edit or @_site_admin, delete seems to be impossible,
except to admin
** when the permission for the FoxNotifyLists groupattributes is
set to @nopass, the edit-user is able to successfully delete - but
this is obviously not secure
here are my current FoxPagePermissions:
if (CondAuth($pagename,'admin')) {
$EnableFoxUrlInput = 'true';
$FoxPagePermissions['*.*'] = 'all';
}
elseif (CondAuth($pagename,'edit')) {
$FoxPagePermissions['*.*'] = 'all'; // replace necessary to be able
to delete pages...
// this is what i usually have turned on...
// $FoxPagePermissions['*.*'] = 'add,delete';
// $FoxPagePermissions['$group.*'] = 'all'; // replace necessary to
be able to delete pages...
}
elseif (CondAuth($pagename,'read')) {
$FoxPagePermissions['*.*'] = 'add';
}
any ideas how i can make it possible for individual users with edit-
priviledges in their own groups can delete their email addresses? am
i missing something? should the notify-info page be added to their
group instead of FoxNotifyLists?
thanks,
adam
------------------------------
Message: 2
Date: Thu, 10 Jul 2008 08:41:42 +0100
From: Hans <design5 at softflow.co.uk>
Subject: Re: [pmwiki-users] new (WikiSh) recipe for creating numbered
sub-pages
To: "Peter Bowers" <pbowers at pobox.com>
Cc: pmwiki-users at pmichaud.com
Message-ID: <1628854940.20080710084142 at softflow.co.uk>
Content-Type: text/plain; charset=iso-8859-1
Wednesday, July 9, 2008, 11:48:48 PM, Peter Bowers wrote:
> I'd be interested if there's another way to do the
> same functionality.
See http://www.pmwiki.org/wiki/Cookbook/SerialPageNames
which offers three markup expressions for the purpose:
{(serialname Group Name)} returns next serial full pagename.
{(serial Group Name)} returns next serial number part only.
{(newticket Group)} creates a pagename as new 'ticket' serial
number, with a day-number part and a serial part.
~Hans
------------------------------
Message: 3
Date: Thu, 10 Jul 2008 09:02:17 +0100
From: Hans <design5 at softflow.co.uk>
Subject: Re: [pmwiki-users] foxnotify delete
To: adam overton <a at plus1plus1plus.org>
Cc: pmwiki-users at pmichaud.com
Message-ID: <314677067.20080710090217 at softflow.co.uk>
Content-Type: text/plain; charset=iso-8859-15
Thursday, July 10, 2008, 3:48:47 AM, adam overton wrote:
> however, when this user then tries to click the 'delete' link, they
> are redirected to FoxNotifyLists/UserGroupA, which displays the same
> foxnotify line with a delete link at the end. the line has not been
> deleted. continued clicking on this delete link results in simply
> reloading this page with no change.
> From all you wrote it seems to be an issue of users not being
authenticated to do the deleting on FoxNotifyLists/UserGroupA.
Not a matter of page permission settings, which you seem to do very
liberally.
You don't mention the settings for $FoxAuth. $FoxAuth is set to
'edit' by default, meaning users need 'edit' access to a target page
in order to have Fox change something.
If you lock FoxNotifyLists/UserGroupA to be edited only by users in
an @admin group then general members will not be able to add or
delete anything on FoxNotifyLists/UserGroupA, if $FoxAuth = 'edit';
But you say adding email adresses works correctly, only deleting does
not. So there may be another issue. For testing this, put on
FoxNotifyLists/UserGroupA a (:foxmessage:) markup to get any error
feedback. Generally for debugging it is good to put such a markup on
the relevant page which holds the Fox form, and disable any redirect
in the form for the tests. If you have a redirect parameter set, then
you will never see any feedback messages, as they get lost in the
process.
So what error or success messages can you see when you test for this?
~Hans
------------------------------
Message: 4
Date: Thu, 10 Jul 2008 09:19:01 +0100
From: Hans <design5 at softflow.co.uk>
Subject: Re: [pmwiki-users] Semi-automatic user accounts for fox forum
-- Htpasswdform
To: Vince Administration <vadmin at math.uconn.edu>
Cc: pmwiki-users at pmichaud.com
Message-ID: <76620396.20080710091901 at softflow.co.uk>
Content-Type: text/plain; charset=iso-8859-15
Thursday, July 10, 2008, 12:43:09 AM, Vince Administration wrote:
> But is there a reasonable way to use a custom form for new users?
> I guess by reasonable I mean without writing the php code. I see
> that there are a lot of SDV's, so that it might be possible to
> customize.
you find in the script a section starting with
SDV($HtpasswordForms['user']
and another with
SDV($HtpasswordForms['new']
you can see that each defines a PmWiki form, using PmWiki input
markup etc. which may be familiar with. The \n simple create line
breaks for conveniance.
Both are set as SDVs, so you can define your own in config.php,
before including the script:
$HtpasswordForms['user'] = "
.....your PmWiki user form markup.....
";
$HtpasswordForms['new'] = "
.....your PmWiki new user form markup.....
";
Make sure you got all the field elements in it, and add what you need.
Use normal wiki markup. Use \n only for convenient linebreaks (it is
used to make the code look a bit more compact). No other php
necessary.
Hope that helps!
~Hans
------------------------------
Message: 5
Date: Thu, 10 Jul 2008 01:25:12 -0700
From: adam overton <a at plus1plus1plus.org>
Subject: [pmwiki-users] UploadMaxSize - correct units?
To: pmwiki-users <pmwiki-users at pmichaud.com>
Message-ID: <6E59348A-084F-4D45-80C0-C546860070C9 at plus1plus1plus.org>
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
hi
is the math of this correct?
this is what's on the 'upload variables' page: http://www.pmwiki.org/
wiki/PmWiki/UploadVariables#UploadPrefixQuota
$UploadMaxSize
Maximum size for uploading files (50000 octets by default)
Units are in bytes.
100K: 100000;
1MB: 1000000;
1GB: 1000000000;
1TB: 1000000000000;
i'm getting mixed up because I also see notes on the UploadsAdmin
page insisting that the following is correct:
100K: 102400;
1MB: 1048576;
1GB: 1073741824;
1TB: 1099511627776;
the math i'm finding on the web is also confirming the latter...
wondering which one to choose...
thanks!
adam
------------------------------
Message: 6
Date: Thu, 10 Jul 2008 11:27:04 +0300
From: "Eemeli Aro" <eemeli at gmail.com>
Subject: Re: [pmwiki-users] Semi-automatic user accounts for fox forum
-- Htpasswdform
To: "Vince Administration" <vadmin at math.uconn.edu>
Cc: pmwiki-users at pmichaud.com, Dominique Faure
<dominique.faure at gmail.com>
Message-ID:
<c133a1660807100127w32b8bc2di92532acd28090a31 at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
I'm working just now on something that might fill your needs. It's not
quite ready yet, but I should be able to get it out by the end of next
week (no promises, mind). It's a module on top of authuser that can
read and write usernames, password hashes and additional data in
SiteAdmin.AuthUser. When done, it'll let me have new users sign up,
verify their email addresses and create accounts for them, use email
to reset passwords, let users modify additional details, remove users,
as well as generate lists of users with specified details.
I've actually got most of this already working on my own sites, but I
need to polish up the whole lot and finish implementing it as a
PageStore extension before I'm ready to publish.
In other words, I ought to have a better answer for you next week.
eemeli
2008/7/10 Vince Administration <vadmin at math.uconn.edu>:
> Hans, Dominique,
> Thanks for pointing me to the htpasswdform recipe. It comes very
> close to what I want. The only thing that I really can't quite
> figure out how to
> do is to modify the login form, since it is created by a PHP
> program. I don't want to give exact details of what I want the form
> to collect because
> then you might do it for me, and it is probably not of wide interest.
> But is there a reasonable way to use a custom form for new users?
> I guess by reasonable I mean without writing the php code. I see
> that there are a lot of SDV's, so that it might be possible to
> customize.
>
> Thanks for your help.
> Vince
>
> On Jul 9, 2008, at 4:06 PM, Dominique Faure wrote:
>
>> On Wed, Jul 9, 2008 at 20:56, Hans <design5 at softflow.co.uk> wrote:
>>>
>>> Wednesday, July 9, 2008, 3:54:22 PM, Vince Administration wrote:
>>>
>>>> The idea is to have read access to anyone, but
>>>> posting only for authenticated users. For a start I would like the
>>>> users to authenticate themselves by filling in a form.
>>>
>>> Not sure how this can be done. The standard way for granting users
>>> some authorisation in PmWiki would be to install PmWiki.AuthUser
>>> and add user id's to SiteAdmin.AuthUser.
>>>
>>> Fox or FoxForum has no separate user management. It is perceivable
>>> that Fox could be used to add userid/password pairs to
>>> SiteAdmin.AuthUser. But that alone will not grant any access rights.
>>> The userid needs to be added to a @group as well. Fox could do that
>>> too I guess. And then that user group, say call it @forummembers,
>>> can
>>> be used as id for an edit password for the Forum wiki group,
>>> and you set for that Forum group $FoxAuth = 'edit';
>>>
>>> Of course the initial NewForumMember form needs to be able/allowed
>>> to
>>> post (add) to SiteAdmin.AuthUser.
>>>
>>> This may work (not tried any of this), but as soon as we let users
>>> add themselves plus password to SiteAdmin.AuthUser we have the
>>> problem
>>> to check first if the userid does already exist. And most likely
>>> users would like to be able to change their password. I don't see
>>> any
>>> simple solution there.
>>>
>>> Oh, I just remember: there is this recipe to check out:
>>> http://www.pmwiki.org/wiki/Cookbook/HtpasswdForm
>>> It has (amongst many others) this config option:
>>>
>>> $HtpasswordNewUsers
>>> When set to 1, a new user form is provided to unauthenticated
>>> users,
>>> allowing them to register themselves (defaults to 0).
>>>
>>> This may well be the ticket! and forget all I wrote above about
>>> adding users with Fox!
>>>
>>>
>>> ~Hans
>>>
>>
>> I couldn't provide more details :)
>>
>> --
>> Dominique
>>
>
>
> _______________________________________________
> pmwiki-users mailing list
> pmwiki-users at pmichaud.com
> http://www.pmichaud.com/mailman/listinfo/pmwiki-users
>
------------------------------
Message: 7
Date: Thu, 10 Jul 2008 01:37:57 -0700
From: adam overton <a at plus1plus1plus.org>
Subject: Re: [pmwiki-users] foxnotify delete
To: Hans <design5 at softflow.co.uk>
Cc: pmwiki-users at pmichaud.com
Message-ID: <147DB1D9-02B8-487B-A037-1D71129335F4 at plus1plus1plus.org>
Content-Type: text/plain; charset="us-ascii"
hi Hans
thanks for the speedy response
lets see
i put a (:foxmessage:) on the resulting page (FoxNotifyLists.UserGroupA)
and received the expected msg: PERMISSION DENIED to delete on
FoxNotifyLists.Aaam!
and my FoxAuth is currently set to 'read'...
> But you say adding email adresses works correctly, only deleting does
> not. So there may be another issue.
yes, still the case...
i find it interesting that the page deletion stuff from
FoxPageManagement work pretty well - i presume because the user is
adding the term "delete", which results in the wiki. i wonder if the
permissions are currently looking more down on the more destructive/
straightforward acts of deletion...??
any ideas for where to start?
thanks,
adam
On 10 Jul 2008, at 1:02 AM, Hans wrote:
> Thursday, July 10, 2008, 3:48:47 AM, adam overton wrote:
>
>> however, when this user then tries to click the 'delete' link, they
>> are redirected to FoxNotifyLists/UserGroupA, which displays the same
>> foxnotify line with a delete link at the end. the line has not been
>> deleted. continued clicking on this delete link results in simply
>> reloading this page with no change.
>
> From all you wrote it seems to be an issue of users not being
> authenticated to do the deleting on FoxNotifyLists/UserGroupA.
> Not a matter of page permission settings, which you seem to do very
> liberally.
>
> You don't mention the settings for $FoxAuth. $FoxAuth is set to
> 'edit' by default, meaning users need 'edit' access to a target page
> in order to have Fox change something.
>
> If you lock FoxNotifyLists/UserGroupA to be edited only by users in
> an @admin group then general members will not be able to add or
> delete anything on FoxNotifyLists/UserGroupA, if $FoxAuth = 'edit';
>
> But you say adding email adresses works correctly, only deleting does
> not. So there may be another issue. For testing this, put on
> FoxNotifyLists/UserGroupA a (:foxmessage:) markup to get any error
> feedback. Generally for debugging it is good to put such a markup on
> the relevant page which holds the Fox form, and disable any redirect
> in the form for the tests. If you have a redirect parameter set, then
> you will never see any feedback messages, as they get lost in the
> process.
>
> So what error or success messages can you see when you test for this?
>
>
> ~Hans
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.pmichaud.com/pipermail/pmwiki-users/attachments/20080710/84acc88a/attachment.html
------------------------------
_______________________________________________
pmwiki-users mailing list
pmwiki-users at pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-users
End of pmwiki-users Digest, Vol 37, Issue 13
********************************************
More information about the pmwiki-users
mailing list