Loading...
 
Skip to main content

Author Coffeeshop


registered users can click on 'admin' and get into it, too

posts: 3

I've spent a couple hours trying to figure this out, and now I'm hoping someone here can tell me how to fix this.

A new wiki, data from a mediawiki installation imported, but not users. People have to register again.

Anybody logged in sees the admin folder in the applications module. Anybody logged in can click on that folder and get into the guts of the administration panels.

Clearly, not a good idea. But I can't see a way to stop this beyond deleting the whole applications module (really not viable). I've searched up and down on the permissions pages (admin users, groups, etc etc) and I can't see any setting that seems to apply.

Unregistered vistors only see the login/registration box, so that works at least.

Can anyone help me with this? I'd be very, very thankful.

posts: 36 Japan

First of all, this forum isn't actually the ))TikiWiki(( support forum; it's only to discuss the documentation. For questions about installing and using Tiki, please go to http://tikiwiki.org/tiki-forums.php.

As for your question, normally non-admin users get a "no permission" error when trying to access admin pages. This is the default behavior, so there is apparently something not right with your Tiki installation or configuration. No perms have to be set to keep the admin sections private; that's the default arrangement. (That is, tiki_p_admin is the permission for these pages. Maybe you should check to make sure that the Registered group doesn't have this permission.

-- Gary

(Please ask any follow-up questions at the support forums linked to above. More people will see them there.)