[pmwiki-users] Re: pmwiki-2.0.beta29 out, needs testers and feedback

[chr at home.se]

On Mon, 11 Apr 2005, Patrick R. Michaud wrote:

Just some minor coments/suggestions:

> Multiple passwords (separated by spaces) can now be set on pages and groups,
> thus entering "one two" for an edit password will means that either "one" or
> "two" will be accepted.  Because of this, passwords cannot contain
> spaces (I hope this won't be a major loss -- let me know if it will).

What are the actual restrictions on the passwords? Any character but 
space? If commas aren't allowed, maybe "one,two" could be useful for 
separating passwords?

> There is an (:if auth ...:) conditional markup available for 
> processing depending on the current authorizations in effect.  For
> example, one can create a bullet list with

Nice.

> At present the only supported form of authentication is to make use of
> whatever is provided by the webserver in the REMOTE_USER variable
> (usually achieved with .htaccess/.htpasswd files -- more on this below),

I use .htaccess/.htpasswd/.htgroup to control access through the group
that the user belongs to. Is there some variable like REMOTE_GROUP? Here's
an example of a .htaccess file that I use:

	AuthName "Development server"
	AuthType Basic
	AuthUserFile /srv/www/htdocs/.htpasswd
	AuthGroupFile /srv/www/htdocs/.htgroup
	Require group Internal

> But, assuming there's already some mechanism in place for identifying
> and authenticating someone, pages can specify a password field of
> "id:xyz", which means to allow only user "xyz" the specified access.  

Perhaps this could be extended to allow a field with "group:Internal"?

/Christian

-- 
Christian Ridderström, +46-8-768 39 44               http://www.md.kth.se/~chr