[pmwiki-users] Posting Permission Patterns

[Hans]

I am trying to develop a good set of default patterns
for pagenames for which posting can be allowed or prohibited by
default. These could be changed or expanded by the admin, but should
give a useful default.

I think the following may be a useful default set, and invite you to
comment on the choices, tell me your own preferences or what you would
like to see as a standard default permission set:

  '-$SiteGroup.*'       // no posting to pages in SiteGroup
  '-PmWiki.*'           // no posting to pages in PmWiki group
  '-*.GroupFooter'      // no posting to GroupFooter
  '-*.GroupHeader'      // no posting to GroupHeader
  '-*.GroupAttributes'  // no posting to GroupAttributes

I am thinking of removing all 'allowed to post to' page patterns,
and leave some as commented out examples an admin might wish to
include:

/*
  // examples of page permission patterns:
  '*.*',                // all pages in all groups except pages excluded as prohibited pages
  'Comments.*'          // all pages in Comments group
  'Comments.{$Group}-{$Name}' //pages in Comments group with name 'Group-Name'
  '*.{$Name}-Comment'   // pages with -Comment prefix in any group
  '{$FullName}-Talk'    // page with -Talk prefix in current group
  '{$FullName}-Discuss' // page with -Discuss prefix in current group
  
  // the following patterns for 'current page' and 'current group'
  // could be exploited to post to edit protected pages
  '{$Group}.{$Name}',    // current page
  '{$Group}.*',          // all pages in current group
*/

This will leave a default setup for maximum protection.
It is up to the admin to loosen the restrictions.
What do you think?


  ~Hans