Restrictions on pages do not work

[hipsterdoofus]

We installed DekiWiki a couple weeks back. We have been fairly happy with it, however, our main reason for going with it is the ability to easily restrict pages, however, this functionality does not appear to always work. Obviously this is a problem when you have sensitive documents on deki and do not want others to see it. At this point, we have to put additial documents on hold until we get this resolved. Is this a known issue that we can expect a fix on?

I restricted one page the other day so that no one can view or edit it besides legit users, however, if I go to the site and I am not even logged on, it still allows me to view it. In some other cases, the restrictions appear to work. Its just a bit flaky for me to feel real comfortable with it as a real means of security, if that is understandable. Thanks for any tips you can give me on this.

[UrsM]

Yes, this bug has been reported by another: http://bugs.opengarden.org/view.php?id=726 and has been resolved in revision 1128, as you can see from the bug log.As you can see from http://doc.opengarden.org/, we have anonymous read-only svn source access enabled, so you can get that revision, or have a look at the difference, and patch the PHP file for yourself: Unified Diff of Article.php (http://svn.opengarden.org/cgi-bin/viewcvs.cgi/trunk/product/deki/wiki/includes/Article.php?rev=1116&r1=1128&r2=1116&diff_format=u )
Please let us know if you have any other question, and feel free to log reports in the bug database, and send patches to dev@opengarden.org, if you can fix an issue by yourself.

[hipsterdoofus]

Alright I updated Article.php and it is fixed, but I have found a slightly amusing second problem. If I click on the subpage, it is listed as being restricted, however if I simply HOVER over a restricted link, I get a tag that comes up that basically says what is in the restricted file, which somewhat overturns what good it is to have it restricted. Is it possible to turn off that alt-tag type things, or whatever they are? I would think that in theory if a subpage is restricted, you wouldn't want that to come up when you hover on its link, but I could just do with turning them off altogether.

Thanks.

[hipsterdoofus]

ignore

[zoiks]

Hipster,

I am having a similar issue, could you explain how the issue was fixed?

I have restricted access to pages, but any user who does a search can get a 'preview' of the restricted information.

I have found that the pop-up bubble is called a Topic Tip using functions tton and ttoff, but I haven't found how to stop this behaviour(I'm not a programmer).

Any help is appreciated.

Updated:

I have commented out the function ShowTopicTips (or similar) in the Skin.php file. So that solved the issues of restricted comments appearing in the pop-up bubble. But, the search results still show a breif description of the page (even though that page is restricted for the user that did the search).

Any comments on the T-Wiki system? Have heard comments on that product?