On Fri, Nov 30, 2012 at 4:29 PM, Flatfender <[email protected]> wrote:

All,

I'm thinking of deploying xwiki either community or commercial. I've looked through the docs, and searched the forum as well.

Here is my question. Can I create groups in AD/LDAP and tie them to Namespaces to get protected wiki's by department?

We have some departments that are ok with an Open wiki, but others like accounting want restricted access. I'd like to manage this at the AD/LDAP group level instead of the xwiki application level, is that possible?

Is namespaces the right way to go to achieve departmental wiki's or would I have to look at multiple wiki's in a wiki farm?

You can link LDAP groups to XWiki groups and then you can setup your rights on XWiki based on theses groups like restricting the access to a space/wikis only to a specific XWiki group. This is usually the way we work with LDAP. The main difference between spaces and wikis is that, since XWiki does not support subspaces, all the pages will be at the same level for a department. Appart from this it depends how different you want your spaces/wikis to be or if you want to have different domain name for each department like admin.myhost.com etc. Note that you can apply completely different skins at space level.

Thanks,

Matt P. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne

On Fri, Nov 30, 2012 at 5:59 PM, Flatfender <[email protected]> wrote:

Ok, thank you for that, the subspace thing is good to know. How I would set this up is now starting to puzzle me.

So let's say I have 3 departments

Engineering Hardware Software

All three will collaborate on the same projects and may need access to the same wiki content, but all may also want private pages that are department specific. So I guess if I didn't a separate wiki department, they could use interwiki links to reference project pages. This would probably necessitate some people from each department being in the other departments wiki group. But then if they created a private namespace, the people from the other department could see it. I could combat this by creating two wikigroups for each department, like wiki_engineering_public, and wiki_engineering_private. Then only departmental members would be in the private group and namespaces could be in the private group to protect.

Or I guess everything is public, and then group perms on the namespace to protect?

The problem is that we're a pretty small company 250 people and most of the people are cross department/project functional.

I'll look more at the perms side of things.

Not sure I understand the issue here. First you should link link theses tree departments to corresponding XWiki groups. Then you can setup access at wiki, space or even document level so for example you can have setup as precise as having a space or a document with read access to the 3 groups and write access to only one for example.

Thank you.

On Fri, Nov 30, 2012 at 11:23 AM, Thomas Mortagne <[email protected]> wrote:

...

On Fri, Nov 30, 2012 at 4:29 PM, Flatfender <[email protected]> wrote:

...

All,

I'm thinking of deploying xwiki either community or commercial. I've looked through the docs, and searched the forum as well.

Here is my question. Can I create groups in AD/LDAP and tie them to Namespaces to get protected wiki's by department?

We have some departments that are ok with an Open wiki, but others like accounting want restricted access. I'd like to manage this at the AD/LDAP group level instead of the xwiki application level, is that possible?

Is namespaces the right way to go to achieve departmental wiki's or would I have to look at multiple wiki's in a wiki farm?

You can link LDAP groups to XWiki groups and then you can setup your rights on XWiki based on theses groups like restricting the access to a space/wikis only to a specific XWiki group. This is usually the way we work with LDAP.

The main difference between spaces and wikis is that, since XWiki does not support subspaces, all the pages will be at the same level for a department. Appart from this it depends how different you want your spaces/wikis to be or if you want to have different domain name for each department like admin.myhost.com etc. Note that you can apply completely different skins at space level.

...

Thanks,

Matt P. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

---

users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne