audited use POSIX

[git.ikiwiki.info.git] / doc / todo / ACL.mdwn

diff --git a/doc/todo/ACL.mdwn b/doc/todo/ACL.mdwn
index 57979385d4cc573718eda74088fd6106c15d5659..cac6c9f1815ec924913fa4e549205c6e6b81bc95 100644 (file)
--- a/doc/todo/ACL.mdwn
+++ b/doc/todo/ACL.mdwn
@@ -21,6 +21,11 @@ something, that I think is very valuable.
 >>>> Which would rule out openid, or other fun forms of auth. And routing all access
 >>>> through the CGI sort of defeats the purpose of ikiwiki. --[[Ethan]]
 
 >>>> Which would rule out openid, or other fun forms of auth. And routing all access
 >>>> through the CGI sort of defeats the purpose of ikiwiki. --[[Ethan]]
 

+>>>>> I think what Joey is suggesting is to use apache ACLs in conjunction
+>>>>> with basic HTTP auth to control read access, and ikiwiki can use the
+>>>>> information via the httpauth plugin for other ACLs (write, admin). But
+>>>>> yes, that would rule out non-httpauth mechanisms. -- [[Jon]]
+

 Also see [[!debbug 443346]].
 
 > Just a few quick thoughts about this:
 Also see [[!debbug 443346]].
 
 > Just a few quick thoughts about this:


@@ -85,3 +90,6 @@ Any idea when this is going to be finished?  If you want, I am happy to beta tes
 > >  * Some pages are only viewable by admins. 
 
 > > Is it possible?  If so how?...
 > >  * Some pages are only viewable by admins. 
 
 > > Is it possible?  If so how?...

+
+>>> I don't believe this is currently possible. What is missing is the concept
+>>> of page 'ownership'. -- [[Jon]]