Prevent anonymous access to the Tools menu

[tstan]

Hello,

I have created a LoginOnly role (with just the "login" permission) and applied it to the anonymous account which works well to prevent anonymous users from browsing the site.

However, anonymous users are still able to pull down the Tools menu and access the full list of users on our Deki Wiki site.

Is there a way to prevent anonymous access to the list of users?

Thanks,
Todd

[SteveB]

That's a bug. I filed a report on it:
http://bugs.opengarden.org/view.php?id=2845

Thanks for pointing that out! And welcome to the forums!

[redfive]

Any update to this issue? Our Wiki launch is being held up because we can't have anonymous users accessing User lists. If possible, please let me know what I can do to override this, even if it's just a stop-gap measure. Also, 'Templates' should not be accessible by Anon. users.

Thank you,
Josh

[jmfreier]

it looks like from the bug report it will be addressed in 1.8.3 (Hayes++). It would be great if we could get a stop-gap measure though. Perhaps even prevent them from seeing popular pages as that shows document structure as well if any of the popular pages are child pages.

[redfive]

Is this in fact addressed in 1.8.3? (ie. in the new 'beta', is login required to see user list?)

thank you

[royk]

Is this in fact addressed in 1.8.3? (ie. in the new 'beta', is login required to see user list?)

thank you

yes, this has been fixed

[redfive]

Sweet. Roy, all your hard work is really appreciated.

[PeteE]

Is this in fact addressed in 1.8.3? (ie. in the new 'beta', is login required to see user list?)

thank you

redfive - Yes, login is required now if you uncheck the BROWSE flag. Here are a couple of screenshots:

[redfive77]

Hi Pete et al,

We just upgraded to 1.8.3b and this doesn't seem to be working. I'm following your directions and editing the Role settings in the Control Panel, but it appears that I can only do this site-wide, and not just for the Users page.

What we need is for unlogged-in users to have access to view the Wiki, but not the Users list (in the Tools drop down). How can we make this happen?

[royk]

You'll need to manually modify the PHP to do this - that's not configurable yet.