Question

Hi,

How we can make all our pages non visible for people not at CERN?

We would like that only CERN users can read our web. Are our pages open to everybody outside the CERN?

Thank you.

Environment

-- TonoRiesco - 16 Sep 2008

Answer

It is possible to set access control on webs or on individual topics.

The easiest is to protect the Web so that only authenticated users can access it. (Like for the CNIC web.) For this, you need to edit the "WebPreferences" topic of your web with the following settings:

NB NB NB: If you apply access restrictions, you MUST remove the web from the sitemap (see above)

    *
          o Set DENYWEBVIEW = TWikiGuest
          o Set ALLOWWEBVIEW =
          o Set DENYWEBCHANGE = TWikiGuest
          o Set ALLOWWEBCHANGE =
          o Set DENYWEBRENAME = TWikiGuest
          o Set ALLOWWEBRENAME = 

If you need to keep some information completely public, tt is better to decide which set of documents you want left open to the public and separate them from the private topics. Groups of Twiki users can be created and may be used for access control. See TWikiAccessControl for further information. Use the email address at the bottom of the page to request any changes.

-- PeterJones - 17 Sep 2008

Hello I also tried to achieve that but I failed. One of my test page is here: https://twiki.cern.ch/twiki/bin/view/LHCOPN/privtest2

I put on the WebPreferences topic:

[3 spaces]* Set NOSEARCHALL = on     
[3 spaces]* Set DENYTOPICVIEW = TWikiGuest
[3 spaces]* Set ALLOWTOPICVIEW = 
[3 spaces]* Set DENYTOPICCHANGE = TWikiGuest
[3 spaces]* Set ALLOWTOPICCHANGE = 
[3 spaces]* Set DENYTOPICRENAME = TWikiGuest
[3 spaces]* Set ALLOWTOPICRENAME = 

Now when I access it, it asks for authentication (what I want). But even after successfully signing on I have not access to the page : "Access check on LHCOPN.Privtest2 failed. Action "VIEW": access not allowed on topic. To edit or read protected pages you first need to register. "

But I think I am registered and logged, any idea on what's wrong?

-- GuillaumeCessieux - 31 Oct 2008

There were some badly set access control settings in the META data - I corrected them.

Put the settings in the contect of the topic itself, this will make it easier to manage.

-- PeterJones - 31 Oct 2008

Thank you Peter this worked fine.

-- GuillaumeCessieux - 31 Oct 2008

One can also use egroups for access control

[3 spaces]* Set ALLOWTOPICVIEW = my-egroup

-- PeterJones - 31 Oct 2010

No such template def TMPL:DEF{PROMPT:supportquery}

-- PeterJones - 04 Nov 2007