stylesheet denied access on login and register page
Hi everyone, I'm tryin' to deploy a private xwiki, so that non-logged people can't view/edit any page, but the login/register pages. Moreover, I set a specific registering process : people need a password to register on the http://xwiki.pps.jussieu.fr/xwiki/bin/view/XWiki/RegisterNewUser page) I did the following to set up the wiki (maybe it would be good that I write some page with more details somewhere on xwiki.org ? :) i) I added /xwiki/bin/view/XWiki/RegisterNewUser, /xwiki/bin/view/XWiki/RegisterJS, /xwiki/bin/view/XWiki/Key to set up this protected register process ii) In the xwiki global rights : appropriate levels to "allow" for XWikiAdminGroup and XWikiAllGroup, every level to "deny" for users "XWikiGuest' Specific Page Access Rights : "view" level to "allow" for XWikiGuest on the 3 previous pages named in step i) and to the /xwiki/bin/edit/XWiki/XWikiUsers class iii) I edited on the webapp filesystem $WEBAPPS_HOME//xwiki/skins/xwiki10b1/global.vm file, assuming that my default skin is xwiki10b1 and replaced the line #set($regurl = $xwiki.getURL("XWiki.Register", "register")) with #set($regurl = $xwiki.getURL("XWiki.RegisterNewUser", "view")) When all of this is set up, the only problem is that accessing the new register or login page (as an XWikiGuest so), these two pages don't show the associated stylesheet. Some previous posts talked about giving the same specific Page Access Rights to xwiki/bin/view/XWiki/DefaultSkin, and turning Off the "Always authenticate on viewing" and "Always authenticate on editing" directives. Even doing this, my register and login page don't show the stylesheet. Did I forget anything ? Thanks. -- Julien Oix UFR d'Informatique - Université Paris Diderot Bureau 5C01 (5ème étage) 175 rue du Chevaleret 75013 PARIS Tel : +33 (0) 144 278 504 Mobile : +33 (0) 664 392 207 --------------------------------------------- http://www.gnu.org/philosophy/no-word-attachments.html
Hi Julien, Julien Oix wrote:
Hi everyone,
I'm tryin' to deploy a private xwiki, so that non-logged people can't view/edit any page, but the login/register pages.
Moreover, I set a specific registering process : people need a password to register on the http://xwiki.pps.jussieu.fr/xwiki/bin/view/XWiki/RegisterNewUser page)
I did the following to set up the wiki (maybe it would be good that I write some page with more details somewhere on xwiki.org ? :)
i) I added /xwiki/bin/view/XWiki/RegisterNewUser, /xwiki/bin/view/XWiki/RegisterJS, /xwiki/bin/view/XWiki/Key to set up this protected register process
ii) In the xwiki global rights : appropriate levels to "allow" for XWikiAdminGroup and XWikiAllGroup, every level to "deny" for users "XWikiGuest' Specific Page Access Rights : "view" level to "allow" for XWikiGuest on the 3 previous pages named in step i) and to the /xwiki/bin/edit/XWiki/XWikiUsers class
iii) I edited on the webapp filesystem $WEBAPPS_HOME//xwiki/skins/xwiki10b1/global.vm file, assuming that my default skin is xwiki10b1 and replaced the line #set($regurl = $xwiki.getURL("XWiki.Register", "register")) with #set($regurl = $xwiki.getURL("XWiki.RegisterNewUser", "view"))
When all of this is set up, the only problem is that accessing the new register or login page (as an XWikiGuest so), these two pages don't show the associated stylesheet.
Some previous posts talked about giving the same specific Page Access Rights to xwiki/bin/view/XWiki/DefaultSkin, and turning Off the "Always authenticate on viewing" and "Always authenticate on editing" directives. Even doing this, my register and login page don't show the stylesheet.
Did I forget anything ?
Actually two things are missing: 1) you need to let the guests access the "Panels" space 2) XWiki currently handles the access to the skin folder as if it were documents (I'm not sure whether this is what we want really but we'll discuss that in the xwiki-dev list) -> you will have to create a document "skins.xwiki10b1" in your wiki, and to specify XWikiGuest has view access to that document. I just tested this and it worked fine! Cheers Stéphane
Hi Julien, On Mar 28, 2007, at 11:33 AM, Julien Oix wrote:
Hi everyone,
I'm tryin' to deploy a private xwiki, so that non-logged people can't view/edit any page, but the login/register pages.
Moreover, I set a specific registering process : people need a password to register on the http://xwiki.pps.jussieu.fr/xwiki/bin/ view/XWiki/RegisterNewUser page)
I did the following to set up the wiki (maybe it would be good that I write some page with more details somewhere on xwiki.org ? :)
i) I added /xwiki/bin/view/XWiki/RegisterNewUser, /xwiki/bin/ view/XWiki/RegisterJS, /xwiki/bin/view/XWiki/Key to set up this protected register process
ii) In the xwiki global rights : appropriate levels to "allow" for XWikiAdminGroup and XWikiAllGroup, every level to "deny" for users "XWikiGuest' Specific Page Access Rights : "view" level to "allow" for XWikiGuest on the 3 previous pages named in step i) and to the / xwiki/bin/edit/XWiki/XWikiUsers class
iii) I edited on the webapp filesystem $WEBAPPS_HOME//xwiki/skins/ xwiki10b1/global.vm file, assuming that my default skin is xwiki10b1 and replaced the line #set($regurl = $xwiki.getURL("XWiki.Register", "register")) with #set($regurl = $xwiki.getURL("XWiki.RegisterNewUser", "view"))
When all of this is set up, the only problem is that accessing the new register or login page (as an XWikiGuest so), these two pages don't show the associated stylesheet.
Some previous posts talked about giving the same specific Page Access Rights to xwiki/bin/view/XWiki/DefaultSkin, and turning Off the "Always authenticate on viewing" and "Always authenticate on editing" directives. Even doing this, my register and login page don't show the stylesheet.
I think we've fixed this in XWiki 1.0 RC1. Can you try it? Also why did you have to change the global.vm file? Why didn't you call your page XWiki.Register instead of XWiki.RegisterNewUser? Yes it would be very cool to document this once you get it to work fine. Somewhere on that page (http://www.xwiki.org/xwiki/bin/view/ AdminGuide/Configuration) we could have a configuration entry for configuring XWiki with various rights: - public wiki - fully private wiki - private wiki with token for registering - fully public wiki Thanks -Vincent
Did I forget anything ?
Thanks.
-- Julien Oix
participants (3)
-
Julien Oix -
Stéphane Laurière -
Vincent Massol