From: Reini U. <ru...@x-...> - 2005-03-30 10:16:24
|
> Hm, i thought the postnuke phpwiki port is known? > > http://stuff.kling.nu/ > > I use that module/port. I have not done any code or port for it - > i just use it and fixed 1-2 minor issues. > > It seems i missed to explain the (beside security) only > and really only important point: That i can use *one* > permission system - the group/permission system of postnuke > to control the wiki. > > Its the most important point. I would *never* install a 2nd > permission system using module. I want and i must use the > central permission system of postnuke to control the wiki > user & pages. This phpwiki postnuke port allow just that. Just to clarify: The 2nd permission system you are talking about (phpwiki's new WikiUserNew methods) just allows that, either passing the wiki username/password pair to an optional backend, like postnuke, and play nicely with the accept/deny return value from this backend. ("ExternalAuth"). Or just passing the postnuke auth to the wiki. You dont need seperate wiki auth and perms, since postnuke already handles auth, perms and prefs. Finer tuning of prefs and perms (phpwiki prefs or acl's) or using the underlying postnuke perms is a matter of taste and tools. We support all of that. > In fact i would even change the cms or write a own small doc > system when i had no choice instead of use the standalone permission of > phpwiki. ... > Sorry when it sounds like a rant, but its really the important point. > > So, as i understand the phpwiki code, the permission system itself is > not that different as the one from postnuke. It should be possible to > relink the permission queries to postnuke and use their loged in/logout > system. The postnuke port does exactly that. > > And what i can tell is, that if that is done, both system together works > wonderful. > >> -----Ursprüngliche Nachricht----- >> Von: php...@li... >> [mailto:php...@li...] Im Auftrag >> von Joel Uckelman >> Gesendet: Mittwoch, 30. März 2005 04:59 >> An: php...@li... >> Betreff: Re: [Phpwiki-talk] phpWiki and postnuke at Daimonin >> >> Thus spake "Michael Toennies": >> > Hello >> > >> > We are the daimonin mmorpg project: >> > http://www.daimonin.net >> > >> > We use phpWiki as our main documentation & information >> central of our >> > postnuke site. I have to say that we are very happy with >> that solution >> > and its a great success. >> > Thank you guys! >> > >> > The only negative point is, that we can't use the original >> phpWiki but >> > a modified version which used the postnuke user permission >> interface. >> > >> > When you look at the site and you understand what we do you >> will see >> > how incredible useful the permission system is. We give access to >> several parts of the website include site sub-admins, gallery album >> owners, file system upload permission, forum permission, forum >> moderator permission and at last write access to the wiki. >> > >> > Thats only (and really only, our old website had it not, so we know >> where we talk about) possible with one central permission and group >> system which gave us the Postnuke CMS. >> > >> > As a game (with much underage users), we need a stable & secure >> permission system. A free wiki access is no option. In the >> old website >> > we had deleting and vandalism of pages every few hours. >> > >> > With the new webpage, we had not a single issue. >> > >> > When you look at the phpWiki of our site, you will notice >> how good it >> > fits in the CMS and how useful it is. >> > >> > What i fear is, that someone find a exploit in the hacked phpWiki. >> Its not active in development anymore and it has still issues. >> > >> > Has the phpWiki community ever thought about to add a >> native postnuke >> > interface? Postnuke lakes a native wiki. It has a very easy to use >> interface which allows it to bind in modules. Also, the >> changes would >> > be normally not so hard - just a redirect to the postnuke >> permission >> > system. Nearly all other parts from phpWiki fits in fine. >> > >> > It would be a win/win solution for both projects. Postnuke >> would get a >> > stable, tested & working wiki. phpWiki would get a >> incredible boost in >> > users and, i can ensure it as a open source project leader >> for years >> > now, alot more developer. >> > >> > Both project would gain ALOT for a little work. >> > >> > They would stay independed as projects but would gain through the >> Synergy effect of the interface both a big boost. >> > >> > Michael Toennies >> > Daimonin MMORPG >> >> So, what you're doing is querying postnuke for user >> permissions? Is that the extend of your modifications? >> >> I haven't looked at our permissions system in a while---maybe >> it already is this way---but it would make some sense to have >> permissions queries work similarly to the way DB queries do. >> That is, have an abstract permissions interface which calls >> the appropriate permissions backend. That way, you guys could >> write a postnuke permissions backend and there would be no >> need for further changes to the code. -- Reini Urban http://phpwiki.org/ http://xarch.tu-graz.ac.at/home/rurban/ |