Why is there no page-level authentication?#

I screwed up. I thought I could do it, but it just turned out to be too much for my abilities (and mainly, my interest). The remnants of the old auth code are still there, and a new auth system is being designed for 2.3.

Can I make the Wiki private - eg to just a team of people?#

Q: Presumably I have a number of ways of doing this. I can access control to the Apache webserver (if using Apache), or add access control to the Tomcat java servlet engine (if using Tomcat) but is there a third way? Will JSPWiki use a username if specified through Tomcat or Apache?

A:If BASIC authentication is enough, take a look at the end of the stock web.xml. There is a security-constraint section that shows how to do default protection; just replace <url-pattern>/Edit.jsp</url-pattern> with <url-pattern>/*</url-pattern> to restrict all access. Also consider the Upload.jsp too.

If you need something more fine-grained, like groups and per-page access definitions - this is being worked on in the 2.3 version of the code.

How do I move the Wiki from one machine to another?#

Simple. Since most JSPWiki providers (except some contributed providers) use a file database, you can just copy all JSPWiki directories (the page directory), and the JSPWiki webapp directory to the new location. Don't forget to change any references in the jspwiki.properties file either that refer to the old machine.

However, note that since the built-in providers do rely on the modify date of the files on disk, you should use a file copy procedure that saves the timestamps, if you don't want your RecentChanges to be completely out-of-order.

Username not being shown on modified pages#

Q: I keep getting the following message on all pages -
"This page last changed on Wed Nov 13 16:44:27 EST 2002 by unknown."
Why isn't the "unknown" changed to the username I've logged in as ? My username does showup in the left menu as - "G'day vipul"

A: You're not using any of the versioning file providers: RCSFileProvider or VersioningFileProvider. Since v2.1.21 the FileSystemProvider also stores the author information.

Is it possible to disable the "asserted user" functionality?

--AnonymousCoward, 09-Mar-2007