[pmwiki-users] foxnotify delete

[adam overton]

soooo,

even with:
if (CondAuth($pagename,'admin')) {
    $EnableFoxUrlInput = 'true';
    $FoxPagePermissions['*.*'] = 'all';
}
elseif (CondAuth($pagename,'edit')) {
	$EnableFoxUrlInput = 'true';
	$FoxPagePermissions['*.*'] = 'all';  // replace necessary to be able  
to delete pages...
}
elseif (CondAuth($pagename,'read')) {
    $FoxPagePermissions['*.*'] = 'all';
}

i'm unable to delete from FoxNotifyLists.UserGroupA...
and in this case, there is no redirection - it stays on the  
UserGroupA-Notify page, and no foxmessage is output...

do you think it possible to delete from one group to another with  
different passwords set for each group?
wondering if there's a way for me to reconfigure FoxNotify so that  
the notify info is actually stored within the user's own group?

a


On 10 Jul 2008, at 1:49 AM, Hans wrote:

> Thursday, July 10, 2008, 9:37:57 AM, adam overton wrote:
>
>> i put a (:foxmessage:) on the resulting page  
>> (FoxNotifyLists.UserGroupA)
>> and received the expected msg: PERMISSION DENIED to delete on
>> FoxNotifyLists.Aaam!
>
>> and my FoxAuth is currently set to 'read'...
>
> Rereading your first post, I think you need to add 'delete' to
> the page permissions for the FoxNotifyLists group:
>
> elseif (CondAuth($pagename,'read')) {
>     $FoxPagePermissions['*.*'] = 'add';
>     $FoxPagePermissions['FoxNotifyLists.*'] = 'add,delete';
> }
>
> This may solve it.
>
> But thinking about security, what stops users from deleting other
> user's notification entries?
>
>   ~Hans
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.pmichaud.com/pipermail/pmwiki-users/attachments/20080710/8f45149c/attachment.html