aboutsummaryrefslogtreecommitdiff
path: root/doc/todo/ACL.mdwn
diff options
context:
space:
mode:
authorjoey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071>2006-12-28 20:49:30 +0000
committerjoey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071>2006-12-28 20:49:30 +0000
commit08e9c427a9be88b43866cff1aa1c1ed6381a93f5 (patch)
tree14fa2e849150276842830788cd30a7f9108f654f /doc/todo/ACL.mdwn
parentc9e07b583bb730a7697cbbeb8b1b7d912d8a1780 (diff)
downloadikiwiki-08e9c427a9be88b43866cff1aa1c1ed6381a93f5.tar
ikiwiki-08e9c427a9be88b43866cff1aa1c1ed6381a93f5.tar.gz
removed some cruft from index/discussion, and moved some parger bits out
into individual todo items
Diffstat (limited to 'doc/todo/ACL.mdwn')
-rw-r--r--doc/todo/ACL.mdwn22
1 files changed, 22 insertions, 0 deletions
diff --git a/doc/todo/ACL.mdwn b/doc/todo/ACL.mdwn
new file mode 100644
index 000000000..dea933d53
--- /dev/null
+++ b/doc/todo/ACL.mdwn
@@ -0,0 +1,22 @@
+How about adding ACL? So that you can control which users are allowed
+to read, write certain pages. The moinmoin wiki has that, and it is
+something, that I think is very valuable.
+
+> ikiwiki currently has only the most rudimentary access controls: pages
+> can be locked, or unlocked and only the admin can edit locked pages. That
+> could certianly be expanded on, although it's not an area that I have an
+> overwhelming desire to work on myself right now. Patches appreciated and
+> I'll be happy to point you in the right directions.. --[[Joey]]
+
+>> I'm really curious how you'd suggest implementing ACLs on reading a page.
+>> It seems to me the only way you could do it is .htaccess DenyAll or something,
+>> and then route all page views through ikiwiki.cgi. Am I missing something?
+>> --[[Ethan]]
+
+>>> Or you could just use apache or whatever and set up the access controls
+>>> there. Of course, that wouldn't integrate very well with the wiki,
+>>> unless perhaps you decided to use http basic authentication and the
+>>> httpauth plugin for ikiwiki that integrates with that.. --[[Joey]]
+
+>>>> Which would rule out openid, or other fun forms of auth. And routing all access
+>>>> through the CGI sort of defeats the purpose of ikiwiki. --[[Ethan]]