Description
The 1.6 to 1.7 upgrade broke HTTP auth, partially fixed in 1.7.1 but not entirely. Users can now view pages using their web credentials but cannot edit pages or change preferences. Even applies to admin user.
Steps to reproduce
Edit, Save
Example
- You are not allowed to edit this page.
or
- You must login to use this action:
- ..
Component selection
- general
Details
wikiconfig.py contains:
from MoinMoin.auth.http import HTTPAuth auth = [HTTPAuth()] user_autocreate = True
Workaround
Downgrade to 1.6.4
Discussion
You need to specify your ACL settings (plus page ACLs on the pages, if there are any)
And please note that authentication is a different topic than ACLs (for authentication it is only interesting whether the users are recognized correctly - is their name showing at the top?).
Plan
- Priority:
- Assigned to:
- Status: