Topic on Extension talk:SemanticAccessControl

Extension doesn´t work

15
Mediawikitester (talkcontribs)

Hi, the extension doesn´t work. I saved a page with this code:

{{ACL Page User Permission
|User=Mediawikitester
|Permission=read, write, grant
|Grant=Grant}}

But all users can read and write :-(

Mediawikitester (talkcontribs)

and also anonymous users have access.

What could be my mistake?

Jasonzhang (talkcontribs)

You need EXPLICITLY deny access for ALL other users.

You can add statment like this

{{ACL Page Group Permission
|UserGroup=All Users
|Permission=write, read, grant
|Grant=Reject
}}

or Configure UserGroup:SiteACL.

Mediawikitester (talkcontribs)

Hi, how do I set permissions for specific users? For example: I want to create a page, that only I have access. Other users and anonymous should not able to read or write. I tought that works with:

{{ACL Page User Permission
|User=Mediawikitester
|Permission=read, write, grant
|Grant=Grant}}

But after saving that page, still all can read and write :-(

Jasonzhang (talkcontribs)

Please read the documentation and my reply! First, check your installation and make sure Semantic Internal Object extensions works. If SIO does not work, this extension does not work, either. Second, please read my reply before. You have to explicitly deny access for ALL other users. Did you do it? Moreover, login may be required for all users. I did not test this user for anonymous user. In my test, login is required at my installation.

59.167.198.77 (talkcontribs)

I feel like I must be missing something about this extension is supposed to work. I have installed it and all its requirements including SIO and they show up under Special:Version in my SMW instance. However, the only way I am able to get ACLs to work is by embedding the ACLs directly in the page, or via template.

I tried initially to block all access to the site following the example in the Development_notes.txt, I have set my SiteACL to: {{ACL UserGroup |Users=All Users }} {{ACL UserGroup Permission |Permissions=write,grant,read |Grant=Reject }}

But still all logged in and anonymous users are able to view Main_Page, and any other page which does not have ACLs to deny access in the actual page content. The same applies to the GroupACL (also set to deny everything), and I have even tried to use Page ACLs (defined using the permissions menu) but they don't seem to work either.

Is there something I am missing about how this extension is supposed to work? Is it required to defined ACL properties on every page or something?

I am using mediawiki 1.22.1 and SMW 1.9.0.1. Any tips you can give would be appreciated

Jasonzhang (talkcontribs)

add this to you template {{ACL Page Group Permission |UserGroup=All Users |Permission=write, read, grant |Grant=Reject }} Please note: owner always has every right. Second, test to make sure SIO really work. I have many trouble with SIO. Sometime SIO just does not work even it is installer properly. Live demo site is available right now. Check it too

59.167.198.77 (talkcontribs)

I realise I can add a block all ACL to my page templates, but what about pages that don't use templates? From what I can understand from the documentation, the SiteACL should control access to all content pages even if they don't have ACLs in them. Is that assumption incorrect? Does the SiteACL only come into affect when other ACLs are evaluated first?

I have looked at the demo site but it's SiteACL is blank and the GroupACL is the default value. It would be very helpful if you could update it so there is an example of how to set these so they work.

I tested SIO with a dummy page using the set_internal function and it seems to be working fine.

Thanks again for your help.

Jasonzhang (talkcontribs)

It seems that the 'All Users' does not work for SiteACL. This is a bug. As a workaround, you can set up site permission in LocalSettings.php following MediaWiki instruction. This extension will fall back into MediaWiki if no explicit deny or grant access is specified.

59.167.198.77 (talkcontribs)

I am unable to get the SiteACL to work in any way, even by specifying UserGroups or individual users. The Development_notes.txt in the google code repository says the SiteACL applies to all users implicitly and the Users field is ignored in the SiteACL (line 35-36). Has the Semantic Access Control extension (or at least the SiteACL/GroupACL functionality) been verified to work with the latest versions of MW/SMW? Could this be a bug with the most recent versions?

Jasonzhang (talkcontribs)

I verified in my demo site. SiteACL does not work. This is a bug in code. Again, SiteACL can be replaced with Wiki itself permission in LocalSettings.php. I did not verify GroupACL.

Mediawikitester (talkcontribs)

Is there an existing webside, which use this extension? It would be very helpful, if I had an example.
I need the information, what for forms, templates and UserGroups,... I have to create, that the extension works.

Jasonzhang (talkcontribs)

Sorry, No existing website. I do not have a public server at my dispose.

Jasonzhang (talkcontribs)

demo site is available right now

Mediawikitester (talkcontribs)

We installed the extension and it works perfect :) < /br> Thank you!

Reply to "Extension doesn´t work"