[pmwiki-users] foxnotify delete

adam overton a at plus1plus1plus.org
Wed Jul 9 21:48:47 CDT 2008


hi hans
i'm having trouble with the following situation:

an individual user on my site is currently able to go to his/her page  
(UserGroupA/UserGroupA-Notify) to use a form to add their  
notification email for their group. this works successfully and  
emails are being added. the notification code from FoxNotifyLists/ 
UserGroupA is included at the bottom of this page and shows the line  
with delete link...

however, when this user then tries to click the 'delete' link, they  
are redirected to FoxNotifyLists/UserGroupA, which displays the same  
foxnotify line with a delete link at the end. the line has not been  
deleted. continued clicking on this delete link results in simply  
reloading this page with no change.

my setup:
- i've just updated to the last fox and foxnotify, with no change in  
response
- each user has their own password which gives them 'edit' access to  
their group
     ** when the permission for the FoxNotifyLists groupattributes is  
set to @_site_edit or @_site_admin, delete seems to be impossible,  
except to admin
     ** when the permission for the FoxNotifyLists groupattributes is  
set to @nopass, the edit-user is able to successfully delete - but  
this is obviously not secure

here are my current FoxPagePermissions:
if (CondAuth($pagename,'admin')) {
    $EnableFoxUrlInput = 'true';
    $FoxPagePermissions['*.*'] = 'all';
}
elseif (CondAuth($pagename,'edit')) {
	$FoxPagePermissions['*.*'] = 'all';  // replace necessary to be able  
to delete pages...

// this is what i usually have turned on...
//	$FoxPagePermissions['*.*'] = 'add,delete';
//	$FoxPagePermissions['$group.*'] = 'all';  // replace necessary to  
be able to delete pages...

}
elseif (CondAuth($pagename,'read')) {
    $FoxPagePermissions['*.*'] = 'add';
}


any ideas how i can make it possible for individual users with edit- 
priviledges in their own groups can delete their email addresses? am  
i missing something? should the notify-info page be added to their  
group instead of FoxNotifyLists?

thanks,
adam





More information about the pmwiki-users mailing list