Red Hat Bugzilla – Bug 1032664
Dokuwiki ACL Not Working
Last modified: 2013-12-17 16:04:54 EST
Created attachment 826682 [details] No options shown Description of problem: Dokuwiki package appears to be missing components to allow it to work correctly with admin rights. There are missing parts including the Plugin Manager, the access manager and other configuration parts. Version-Release number of selected component (if applicable): How reproducible: Always Steps to Reproduce: 1. Open browser tab 2. Select http://localhost/dokuwiki/doku.php? 3. Get opening screen with no configuration options Actual results: No way to configure Expected results: Should have all normal functions. Additional info:
Currently you have to setup ACLs manually, in /etc/dokuwiki directory. The fix for this might be to ship install.php file (which is currently not shipped) which allows you to setup permissions more user-friedly way than setting them in /etc/dokuwiki. Andrew, do you remember why install.php is removed in dokuwiki.spec? Is there any reason for it or can I remove the statement which removes install.php from final package? Thanks in advance for your response.
This was done to prevent users from making changes via the web interface.
(In reply to Andrew Colin Kissa from comment #2) > This was done to prevent users from making changes via the web interface. Wouldn't be better to list install.php in dokuwiki.httpd and allow access only from 127.0.0.1 and ::1? This would allow administrator to use install.php script to setup dokuwiki instance but this script won't be accessible to remote users. What do you think about this approach? Otherwise if you think that install.php shouldn't be part of dokuwiki package at all, you can close this bug. Reporter can configure ACL directly in configuration files in /etc/dokuwiki (however I believe that install.php is more convenient for some people).
I don't think install files should be shipped in a package, that is the convention used by other packages that have an install.php file. Closing the bug.
Well, how does on setup ACLs manually? That appears to be a blocker.
https://www.dokuwiki.org/acl
That link starts out with: "DokuWiki – like most wikis — is very open by default. Everyone is allowed to create, edit and delete pages." That has nothing to do with administering the program, and is therefore essentually a falsehood. Evidently, there are some bad assumptions in using the program. I have never heard of a program that a given user installs that will not in turn allow that user to administer his own program. But that is exactly what docuwiki does with this install. That is bizarre. The bottom line is that the package is not properly created to install all the necessary components and features. I recommend that it be removed until it does. Right now it is useless to any reasonable user. And that's a damn shame.
You are clearly not being objective here, you are able to configure ACL's without using the install.php file - by editing the acl file, the link i provided describes the format of the ACL file several people are doing so, if you are unable to do so and prefer a gui doing it for you does not mean the package is not useful. Let me point out to you that none of the other distro's ship an install file for dokuwiki in their package as well, that has not diminished the the usefulness of their packages. Please get your facts correct and stop peddling falsehoods, this package is totally usable and adminster-able. This is the last response i will be making with regards to this issue, this ticket is closed as will not fix.
Your shortsightedness does not change the facts. I used to be able to install the program without any trouble at all. Now there is a roadblock without any simple fixes. That the program should install with all the necessary features to administer it, goes without saying. At this point it does not do so. That is not a falsehood; that is a fact. It is totally ignorant to state that it is adminser-able (sic) when in fact the administering parts of it are missing without outside work. You are the one peddling falsehoods because you fail to understand what the user needs. Such shortsightedness does nothing to further the cause of computing whatsoever. This software installation routine remains half-baked.