Description
allowed_actions was removed in the in 1.5.0beta1 and was replaced with actions_excluded. As a sysadmin, "No" is a better default for things rather than saying "Yes" to everything.
For instance, I want to restrict my users to the actions X, Y, Z and nothing else.
With this configuration change, I have to blacklist everything, I do not want my users to touch, in a huge list. However should another release of Moin come around with new actions, I have to track them down individually, and append them to the blacklist; which is tedious.
Steps to reproduce
- It's the detault.
Component selection
- general
Details
MoinMoin Version |
1.5.0beta1 onwards |
OS and Version |
- |
Python Version |
- |
Server Setup |
- |
Server Details |
- |
Language you are using the wiki in (set in the browser/UserPreferences) |
- |
Discussion
That's not a bug (actions_excluded works as it should), but rather a feature request.
About the feature request: unlikely to happen within moin 1.x.
We'll have to see how that stuff is handled in moin2, item ACLs are already slightly different. Maybe we'll just use ACLs for other stuff, too.
Workaround
get_names or get_available_actions from MoinMoin.action should be able to list all available actions. You could exclude all and remove then the ones from the excluded list which you want to use. e.g. http://hg.moinmo.in/moin/1.9/file/32a0bf3c4e43/MoinMoin/theme/__init__.py#l1031
Plan
- Priority:
- Assigned to:
- Status: