Question

Hi,

How we can make all our pages non visible for people not at CERN?

We would like that only CERN users can read our web. Are our pages open to everybody outside the CERN?

Thank you.

Environment

Web Browser: All
User Location: unspecified
Categories: Authentication, Permissions, Security

-- TonoRiesco - 16 Sep 2008

Answer

ALERT! If you answer a question - or have a question you asked answered by someone - please remember to edit the page and set the status to answered. The status is in a drop-down list below the edit box.

It is possible to set access control on webs or on individual topics.

The easiest is to protect the Web so that only authenticated users can access it. (Like for the CNIC web.) For this, you need to edit the "WebPreferences" topic of your web with the following settings:

NB NB NB: If you apply access restrictions, you MUST remove the web from the sitemap (see above)

    *
          o Set DENYWEBVIEW = TWikiGuest
          o Set ALLOWWEBVIEW =
          o Set DENYWEBCHANGE = TWikiGuest
          o Set ALLOWWEBCHANGE =
          o Set DENYWEBRENAME = TWikiGuest
          o Set ALLOWWEBRENAME = 

If you need to keep some information completely public, tt is better to decide which set of documents you want left open to the public and separate them from the private topics. Groups of Twiki users can be created and may be used for access control. See TWikiAccessControl for further information. Use the email address at the bottom of the page to request any changes.

-- PeterJones - 17 Sep 2008

Hello I also tried to achieve that but I failed. One of my test page is here: https://twiki.cern.ch/twiki/bin/view/LHCOPN/privtest2

I put on the WebPreferences topic: [3 spaces]* Set NOSEARCHALL = on [3 spaces]* Set DENYTOPICVIEW = TWikiGuest [3 spaces]* Set ALLOWTOPICVIEW = [3 spaces]* Set DENYTOPICCHANGE = TWikiGuest [3 spaces]* Set ALLOWTOPICCHANGE = [3 spaces]* Set DENYTOPICRENAME = TWikiGuest [3 spaces]* Set ALLOWTOPICRENAME =

Now when I access it, it asks for authentication (what I want). But even after successfully signing on I have not access to the page : "Access check on LHCOPN.Privtest2 failed. Action "VIEW": access not allowed on topic. To edit or read protected pages you first need to register. "

But I think I am registered and logged, any idea on what's wrong?

-- GuillaumeCessieux - 31 Oct 2008

There were some badly set access control settings in the META data - I corrected them.

Put the settings in the contect of the topic itself, this will make it easier to manage.

-- PeterJones - 31 Oct 2008

Thank you Peter this worked fine.

-- GuillaumeCessieux - 31 Oct 2008 No such template def TMPL:DEF{PROMPT:supportquery}

-- PeterJones - 04 Nov 2007


This topic: Support > WebHome > HowToSecureWebPages
Topic revision: r6 - 2008-10-31 - GuillaumeCessieux
 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2020 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback