[pmwiki-users] CondAuth ignores $HandleAuth: Bug?

[Patrick R. Michaud]

On Sat, Oct 06, 2007 at 05:50:36PM -0400, Stirling Westrup wrote:
> I've just tracked down a problem that I was having with a statement like:
> 
>   (:if auth upload {$PAGE}:)
> 
> I presume (and I could be wrong) that this is supposed to test if the user has
> the authority to upload to page {$PAGE}. 

What this does is test if someone has "upload" permission for the given page.
It doesn't test if someone is allowed to perform ?action=upload -- individual
actions are allowed to have different permissions.

For reference, the standard authorization levels are 'read', 'edit', 'upload',
and 'attr'.  Actions can be reconfigured to use different levels -- i.e.,
setting $HandleAuth['upload']  tells the 'upload' action to use a different
authorization level.

The correct way to see if someone can use action=upload on a page
would be with

    (:if action upload {$PAGE} :)

Reportedly this isn't working -- I'll have to double check it and issue an
update if that's the case.

Pm