cross
New Foswiki release 2.1.6 is available with important security fixes.
Sourceforge foswiki email lists being discontinued. Subscribe to the new Foswiki announce and discuss lists at MailingLists
This question about Authentication or Authorisation: Task closed

TagMeCreateNewTag topic requires ALLOWTOPICCHANGE

Just installed newest TagMePlugin
  • TagMePlugin (2.1.0, $Rev: 14889 (2012-05-23)
  • JQueryPlugin (4.33, $Rev: 14572 (2012-04-06)
  • Foswiki-1.1.5, Tue, 10 Apr 2012, build 14595, Plugin API version 2.2

Working with web and group based ACLs: Only AdminGroup has access to the System web.

Added to SitePreferences

 * Set TAGMEPLUGIN_ALLOW_TAG_CHANGE = %USERSWEB%.CustomGroup, %USERSWEB%.AdminGroup

Everything worked fine, including adding, renaming and delete of tags. But users of the CustomGroup can't create new tags. Error message (of viewauth I guess): MatthiasBrix cannot add new tags (newline) Return to System

I found following workaround: Grant topic change privileges to normal user to TagMeCreateNewTag.

Adding to TopicPreferences of TagMeCreateNewTag:

   * Set ALLOWTOPICCHANGE = %USERSWEB%.CustomGroup, %USERSWEB%.AdminGroup

Did I missed something in the documentation or is it a bug?

-- MatthiasBrix - 19 Jun 2012

This is a bug. The documentation for TagMePlugin clearly states:

---++++ Create new tags
...
Anyone is allowed to create new tags - but only users with change permission can add tags to topics.

whereas the latest version of TagMePlugin switched from checking that the user is logged (any user other than WikiGuest) to checking whether he has CHANGE permissions for the System web (normally restricted to AdminGroup)

-- FlorianSchlichting - 24 Jul 2012

fixed in TagMePlugin 2.1.1

-- FlorianSchlichting - 27 Jul 2012
 

QuestionForm edit

Subject Authentication or Authorisation
Extension TagMePlugin
Version Foswiki 1.1.5
Status Task closed
Related Topics Tasks.Item12009
Topic revision: r3 - 27 Jul 2012, FlorianSchlichting - This page was cached on 20 Sep 2018 - 02:47.

The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy