Item11448: Implement {GuestCanComment} feature.

pencil
Priority: Enhancement
Current State: Closed
Released In: 2.0.0
Target Release: major
Applies To: Extension
Component: CommentPlugin
Branches: trunk
Reported By: GeorgeClark
Waiting For:
Last Change By: GeorgeClark
The {GuestCanComment} feature is not implemented beyond the settings in Foswiki.spec.

Comment.pm needs to test that unless GuestCanComment is set, then the user must be authenticated. If not authenticated, then redirect the request from rest to restauth so that the user is prompted for a login.

Not sure what this does with ajax operation, and should it redirect, or just fail when running as ajax?

-- GeorgeClark - 16 Jan 2012

I'm doubting the {GuestCanComment} configure checker's error message when restauth is not in {AuthScripts}.

This could permit commenting by unauthorized users

I began to re-word the message along the lines of 'If {GuestCanComment} and WikiGuest has CHANGE permission, unauthenticated users may be able to comment' but then this is true anyway when rest itself isn't listed {AuthScripts}.

Anyway, it's not unauthorized users that's a problem, but unauthenticated ones.

-- PaulHarvey - 22 Feb 2012
 
Topic revision: r9 - 05 Jul 2015, GeorgeClark - This page was cached on 27 May 2016 - 16:23.

The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License