<html aria-label="message body"><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Thanks Petko,<div><br></div><div>I have the logging in working using a version of the database recipe you provided. Now I’m struggling with the next challenge.</div><div>Maybe it is because I do not know how $authlist is meant to look/work...</div><div><br></div><div>Most of my wiki will be available only to signed in users. So when people sign in my code (authuser_LB.php) adds:</div><div><br></div><div><div><font face="Andale Mono"> # success</font></div><div><font face="Andale Mono"> # set user groups: everyone logged in can read</font></div><div><font face="Andale Mono"> $authlist['@read'] = 1;</font></div></div><div><br></div><div>However, for certain users I want to add group rights.. (like for me, admin) (role_in is case insensitive string compare against an array of functions and returns true if any of them match):</div><div><br></div><div><div><font face="Andale Mono"> # check role and functions</font></div><div><font face="Andale Mono"> $admins = ['Chairperson ICT', 'Administrative Secretary', 'Ambtelijk Secretaris']; </font></div><div><font face="Andale Mono"> # admins are ICT and ASMD</font></div><div><font face="Andale Mono"> if (role_in($role, $admins)) {</font></div><div><font face="Andale Mono"> $authlist['@admin'] = 1;</font></div><div><font face="Andale Mono"> }</font></div></div><div><br></div><div>This appears to work. Although I’m not entirely sure, as I added my login username to the Site/AuthUser page as an admin:</div><div>@admins: <a href="mailto:xxxx@xxxxx.com">xxxx@xxxxx.com</a> so that might override it…</div><div><br></div><div>Now I have a Group on my wiki which I only want members of the group (and me, as admin) to read, edit, upload etc. So I added a statement like:</div><div><br></div><div><font face="Andale Mono"><span class="Apple-tab-span" style="white-space:pre"> </span>$gr = ['District governor', 'MD council chairperson', 'MD general secretary', 'MD treasurer’,</font></div><div><span class="Apple-tab-span" style="font-family: "Andale Mono"; white-space: pre;"> </span><font face="Andale Mono">'MD Opvolgend council chairperson', 'MD vice council chairperson', 'MD Governor council member’];</font></div><div><span style="font-family: "Andale Mono";"><span class="Apple-tab-span" style="white-space:pre"> </span>if (role_in($role, $gr)) {</span></div><div><span style="font-family: "Andale Mono";"><span class="Apple-tab-span" style="white-space:pre"> </span>$authlist['@gr'] = 1;</span></div><div><span style="font-family: "Andale Mono";"><span class="Apple-tab-span" style="white-space:pre"> </span>$authlist['@edit'] = 1;</span></div><div><span style="font-family: "Andale Mono";"><span class="Apple-tab-span" style="white-space:pre"> </span>}</span></div><div><br></div><div>Then I tried to add to the page Group.Start access restrictions using Group.GroupAttributes?action=attr and adding @gr to all of the access control fields (read, edit, attr and upload). </div><div><br></div><div>After doing that, the group / page became completely inaccessible to me (logged in, and should be at admin level). I tried to add </div><div><br></div><div><div><span style="font-family: "Andale Mono";"><span class="Apple-tab-span" style="white-space: pre;"> </span>$authlist['@gr'] = 1;</span></div></div><div><br></div><div>To my own authlist, but even that did not give me access. Where am I misunderstanding the way this is meant to work?</div><div><br></div><div>Thanks for your help...</div><div><br></div><div>Peter</div></body></html>