Description

Setting ACL permissions via User Group does not work, Users from the group are NOT receiving the permissions. Error similar to Bug MoinMoinBugs/UserGroupsIgnored, but deleting the cache does not help.

Steps to reproduce

1. Create page TestGroup with User TestUser

   •  * TestUser
      * OtherUser

2. Create page TestPage with

   • #acl TestGroup:read,write,delete,revert,admin

3. Login as TestUser

4. Bug: TestUser is not allowed to view page, receives error message "you are not allowed to view the page".

5. If i give read permissions to TestUser explicitly (not via TestGroup), everything is fine.

Component selection

Everything worked fine in 1.62. Wiki Farm setup. In farmconfig.py I have:

    data_dir = './farm/'
    user_dir = './farm/user' 
wikis = [
    ("wiki1", r"^wiki1.server:8000/.*$"),
    ("wiki2", r"^wiki2.server:8000/.*$"),
    ("wiki3", r"^wiki3.server:8000/.*$"),
]

In wiki1.py i have

from farmconfig import FarmConfig

class Config(FarmConfig):
    data_dir = './wiki1/'

Workaround / Resolution

1. Reset all file permissions in XP file security to "Full Access" for the user account running Moin Server. (Previously, account should have had "Create file" and "write own files" permissions.
2. Purged all cache Directories.

Discussion

Do you have cleaned the cache after the migration of the data dir? Please can you check if the user browser of SystemAdmin in your wiki lists any Groups. You need to be superuser, -- ReimarBauer 2008-06-27 16:57:11

Did not show group membership in SystemAdmin page. I thought I cleaned cache after migration, now I cleaned it again and reset permissions. Now working fine.

Same problem here with 1.7.1 after updating from 1.5.8. System is Debian Etch & fastcgi. Group membership is empty. I tried deleting all files below /cache/ and 'moin.py maint cleancache' but nothing helps on it. Does anyone have an idea what else to check?

Do you have restarted the webservice after cleaning those files or better stopped it beforehand?

Did you read docs/CHANGES, especially the stuff about page_*_regex? If you have those regexes in your config, first just try removing them (so you get the defaults), then (if needed), create new ones like described in CHANGES.

Ahh, my fault. The regexes were the problem. Changed them to the new format and ACLs work again. Many thanks!

Plan

• Priority:
• Assigned to:
• Status: likely configuration problem, reopen if this is not the case

CategoryMoinMoinNoBug