Access control for friends and wizards

From GeneWeb
Revision as of 13:57, 31 October 2015 by Henri83 (Talk | contribs)

Jump to: navigation, search
150px-Geographylogo svg.png Language: English • français

Access to the content of a base is controlled through several mechanisms:

  • A server level access control limiting access to a list of persons, verified by a password;
  • A base level access control limiting access to a list of persons, verified by a password.

These two mechanisms restrict to a known list the possible visitors to a base. See Access for details.

  • A generic of specific password mechanism giving to some visitors the status of:
    • Wizard: having total read and write access to the base content;
    • Friend: having total read access to the content of the base;
    • Visitors: (default status) having limited access to the content of the base (persons older than some value, as defined by private_yearsy in the configuration file basename.gwf. Default is 150 years).
Visitors have also access to persons tagged as "public", as defined in Update a person.

Generic access

Generic access is directly defined in the configuration file basename.gwf:

friend_passwd=
wizard_passwd=

Two syntaxes are possible

  • username:password: in this case all users share the same username/password pair;
  • password: in this case, no username need to be supplied.

For instance, the grimaldi.gwf configuration file os the GeneWeb test base contains:

friend_passwd=grimaldi:friend
wizard_passwd=grimaldi:wizard

Note that the access control pop-up window of GeneWeb may offer in some context a single capture field rather that two. In this case, one should entre the full {{c|username:password]] sequence (or password if there is no username).

Specific access

Specific access control is achieved by defining files containing username:password pairs. The names of those files are directly defined in the configuration file basename.gwf and should reside in the bases folder:

friend_passwd_file=
wizard_passwd_file=

The systax of those files is as follows:

username:password 
username:password:comment
username:password:full name:comment
username:password:first-name /last-name:comment

The full name appears in the wizard page, alphabetically sorted. The / helps define the sorting position in the case of compound names. For instance: louis:xyz:Louis de /Broglie will be sorted at letter B and appear as Broglie (Louis de).

When both specific access and generic access are specified in the configuration file basename.gwf, the specific access mechanism takes precedence.