Item3642: Documentation of DENYWEBRENAME and ALLOWWEBRENAME is missing

TWiki:TWikiAccessControl

I tested TWiki.org (now on 4.1.1), it still seems to work (thanks god):

• Codev web denies guests to change content
• Codev web requires a person to be member of the TWiki:Main/TWikiCommunityGroup
• See settings in TWiki:Codev/WebPreferences

It is quite important to make a distinction between content edit permission and content rename/delete permission. Basically, a rename or delete has a bigger impact than an edit. No big deal if someone deletes the topic content, it is still there in a prev topic revision. But bigger deal if someone deletes an important topic. That is why there needs to be a distinction. Another issue is renaming content that breaks links from outside.

-- TWiki:Main/PeterThoeny - 15 Feb 2007

See also comment in TWiki:TWiki/TWikiAccessControl by RafaelCaceres on 15 Feb 2007.

-- TWiki:Main.PeterThoeny - 15 Feb 2007

As I can see it it was Item2605 SVN 11363 from August last year that suddenly changed all of this.

-- TWiki:Main.KennethLavrsen - 15 Feb 2007

Version TWiki-4.1.1, Mon, 05 Feb 2007, build 12770 introduces an error in the documentation: ALLOWWEBRENAME and ALLOWTOPICRENAME have been removed from TWikiAccessControl, yet they are required access control options in order to be able to delete an attachment.

-- TWiki:Main/RafaelCaceres - 15 Feb 2007

I copied above comment by Rafael over from duplicate Item3644.

-- TWiki:Main.PeterThoeny - 16 Feb 2007

This is primarily a documentation issue. We have survived since 4.0.0 with this change in place.

I originally removed the RENAMEdoc back in 11363 (pre-4.0) because of the confusion it caused, when users discovered that you could rename a topic/web without needing CHANGE access. The idea was that a topic rename should be controlled by web WEBCHANGE rights (source and destination webs) and a web rename should be controlled by site ROOTCHANGE rights (see r11363). I didn't change the code (other than to add a CHANGE check) so that that rename restrictions on existing webs were still honoured after an upgrade.

Your point about the relative impact of rename being different to a change is a good one, Peter, thanks. I would have preferred to see a solution to the irreversible rename operation. TWiki fails traceability requirements for any quality system without this, unless you disallow rename altogether, but I fully appreciate the technical difficulty of implementing it. It's a shame the RENAME documentation failed to mention this critical point.

Since it was entirely my error, I will revert the change made in 11363 and restore the original doc.

CC

Subject to bits of it being reverted by Ken, this is done. Marking for release.

CC

Closed with release of 4.1.2

KJL

Cleaned "WaitingFor" field.

-- TWiki:Main.GilmarSantosJr - 10 Aug 2008