Murray Altheim wrote:
[...]
I think JSPWiki is a sweet spot in terms of complexity and usability,
and the kinds of security features I'm hoping to attain should really
have little or no impact on the average wiki user/author. What this
should be is transparent except for the admins, and even for them it
should be relatively simple, handled with configuration and group
membership.

...and just to round off how I've thought about a two wiki solution,
the issue is that the public pages need to be able to include content
off of the private pages, but only *specific* content (e.g. we don't
want to accidentally reveal private contact information, etc.). If
a user on the private area links out to public information either on
the public part of the site or any other site, that obviously is of
no issue, it's only keeping the private content private, which is
either at a page level or in prohibiting or restricting transclusions.

The kind of information that would be copied from private to public
is basically events scheduling information. Club members cooperatively
edit the club's schedule of events, and want to transclude the upcoming
events on the public portion of the site. That kind of thing.

My preferred approach at this point is one wiki, but if that doesn't
work it's a matter of controlling the transclusion of content from
the private site to the public one. Given that the content that should
be permitted to be copied *can* be at a page level, we could have a
list of "ok to be published publicly" page controlled by an admin
group.

What I'm thinking is that I've got both a TranscludePlugin and an
InterWikiPlugin within the CeryleWikiPlugins, both use XML-RPC to
transfer content between XML-RPC-enabled wikis. As Janne mentioned,
wikis are generally public playgrounds so there's little if any
control on what content is copied, or the source or target sites.
If both wikis have XML-RPC enabled the current plugins don't put
any restrictions on transclusion.

But because I know the internals of those two plugins pretty well
it occurs to me that I could modify one of them to suit this
purpose. I'd have to lock down somewhere who was who, and probably
check a wiki page to see if the content was coming from an approved
page. That's not enormously difficult and puts the complication on
me rather than the wiki admins or users.

But I'm still hoping this can be done with one wiki. Maybe not...
having two just means the club has to deal with two, but that might
in the end be easier to both explain, document, and maintain.

Murray

...........................................................................
Murray Altheim <murray07 at altheim.com>                           ===  = =
http://www.altheim.com/murray/                                     = =  ===
SGML Grease Monkey, Banjo Player, Wantanabe Zen Monk               = =  = =

      Boundless wind and moon - the eye within eyes,
      Inexhaustible heaven and earth - the light beyond light,
      The willow dark, the flower bright - ten thousand houses,
      Knock at any door - there's one who will respond.
                                      -- The Blue Cliff Record
_______________________________________________
This is the Jspwiki-users mailing list, in which we discuss the stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. For development discussion, please join jspwiki-dev.
http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
http://www.jspwiki.org/JSPWikiMailingList

Reply via email to