moin
moin copied to clipboard
default namespace ACL must include create if other namespace allows create
If wikiconfig.py has ACL for NAMESPACE_USERS:
default='All:read,write,create,destroy,admin',
and ACL for NAMESPACE_DEFAULT:
default='All:read,write',
then a user who is not logged in may read/modify/destroy/admin (change ACL on modify) an item in users namespace. But same user may not create an item in users namespace. Attempts to do so result in:
Item not found
Item 'xxx' does not exist.
Workaround is to change ACL for NAMESPACE_DEFAULT:
default='All:read,write,create',