X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/cbb3bae526f862552bfda803f64cf1e695d115d3..a8672085e4ad9e1ba25a5e2d5a590d15c5a3a7bb:/doc/todo/fileupload.mdwn?ds=inline diff --git a/doc/todo/fileupload.mdwn b/doc/todo/fileupload.mdwn index 3a3f27dc4..4623e4a5a 100644 --- a/doc/todo/fileupload.mdwn +++ b/doc/todo/fileupload.mdwn @@ -20,6 +20,7 @@ the work is in securing it. Several classes of controls seem appropriate: browsers are probably too smart for their own good and may ignore the extension / mime info and process as the actual detected file type. It may be necessary to use `file` to determine a file's true type. +* Optional ability to test a file using a virus scanner like clamav. * Limits to who can upload what type of files. * Limits to what files can be uploaded where. @@ -41,9 +42,11 @@ as a wikifs. Maybe. And if that's done, it can also be used to lock users from editing a pages or the whole wiki: - ( user(spammer) and * ) or - ( user(annoying) and index) or - ( immutable_page ) + !(( user(spammer) and * ) or + ( user(42.12.*) and * ) or + ( user(http://evilopenidserver/*) and * ) or + ( user(annoying) and index) or + ( immutable_page )) That would obsolete the current simple admin prefs for banned users and locked pages. Suddenly all the access controls live in one place.