Robert Hercz wrote:
Hi,
We've just installed XWiki Enterprise to get a look'n'feel and see if this
is something we should base our corporate InfoCenter on, for both internal
and external use (we are a telecommunications operator in Norway).
User Rights administration is important, as is hacker-security, as there
will be sensitive documents both as attachments and in wiki pages.
We have established Spaces in XWiki and assigned individual user rights to
Spaces.
In order to fully understand XWiki and its potentials, I have some questions
I hope someone can answer:
1) Is user administration and group membership a fully manual process, i.e.
the admin needs to know the user's login ID and manually create an entry and
type in this user ID, for this to work, or are there any utilities which
allows me to select users from a list and attach dependencies to Groups (or
the other way, i.e. to select Group and move users into a list)?
One way is to integrate it with LDAP, if you already have one active in
your intranet.
If you have just a list of users in a CSV, it's easy to write a script
that automatically creates the user accounts based on that file (I used
something like that for a site).
2) Is it possible to have some extra security which is
IP-dependent, i.e.
have certain Spaces available only to internal IP-addresses (10.10.x.x and
192.168.x.x)?
There isn't anything like this by default, but it is very easy (for a
programmer) to write a plugin that checks the IP of the client and
throws an exception if certain restrictions aren't met.
Speaking of security, as long as you configure the rights properly,
there's no risk (assuming the admin passwords are safe enough not to be
cracked).
If you need help with configuring the security, or anything related to
the setup, you can contact the XWiki company (
www.xwiki.com) for some
expertise.
Sergiu