Another potentially odd HaloACL question...
We have two admin groups defined roughly as follows:
Admin A
{{#member:members=(users), User:WikiSysop }}
{{#manage group:assigned to=User:WikiSysop,(users)}}
[[Category:ACL/Group]]
Admin B
{{#member:members=(user list)}}
{{#manage group:assigned to=Group/Admin A,User:WikiSysop,(users)}}
[[Category:ACL/Group]]
We also have an ACL defined over the main namespace as follows:
{{#access: assigned to=Group/Admin A,Group/Admin B,User:WikiSysop
|actions=read,edit,formedit,wysiwyg,create,move,delete,annotate
|description=fullaccess for U:WikiSysop, G:Admin A, G:Admin B
|name=Right}}
{{#manage rights: assigned to=Group/Admin A,Group/Admin B,User:WikiSysop}}
[[Category:ACL/ACL]]
With this configuration, WikiSysop can only view source on any page in the wiki and is completely unable to edit. However, if I go into the "Global Permissions" tab and explicitly grant the "Edit" right to these two Admin groups, the WikiSysop user gains edit ability.
Now, I understand that anything not explicitly granted in HaloACL means the user doesn't have that right, but I'm a bit befuddled as to why an ACL over the Main namespace with full access granted to WikiSysop would result in WikiSysop only being able to view source (rather than the expected edit ability with just the Main namespace ACL in place).
Any hints? I'm sure I'm missing something glaringly stupid, and I'm hoping group wisdom will enlighten me..
__________________________________________________
Peter Ellis
Scientist
Knowledge Discovery and Informatics
Pacific Northwest National Laboratory
|