none

[openafs-wiki.git] / TWiki / TWikiAccessControl.mdwn

diff --git a/TWiki/TWikiAccessControl.mdwn b/TWiki/TWikiAccessControl.mdwn
index 48a73b6..8712989 100644 (file)
--- a/TWiki/TWikiAccessControl.mdwn
+++ b/TWiki/TWikiAccessControl.mdwn
@@ -54,6 +54,35 @@ The same rules apply like the one for Access Control for Individual Topics; with
 - DENYTOPICCHANGE (in topic) overrides DENYWEBCHANGE (in WebPreferences)
 - ALLOWTOPICCHANGE (in topic) overrides ALLOWWEBCHANGE (in WebPreferences)
 
+### <a name="Rename Access Restriction for In"></a> Rename Access Restriction for Individual Topics
+
+You can define restrictions of who is allowed to rename a topic. Note that users need this permission in addition to the CHANGE permission in order to rename a topic. They also need CHANGE access to change references in referring topics.
+
+Define one or both of these variables in a topic, preferably at the end of the topic:
+
+- Set DENYTOPICRENAME = &lt; list of users and groups &gt;
+- Set ALLOWTOPICRENAME = &lt; list of users and groups &gt;
+
+DENYTOPICCRENAME defines users or groups that **are not** allowed to rename the topic. It is a comma delimited list of users and groups. Example: <br />`    * Set DENYTOPICRENAME = Main.SomeBadBoy, Main.SomeBadGirl, Main.SomeHackerGroup`
+
+ALLOWTOPICRENAME defines users or groups that **are** allowed to rename the topic. It is a comma delimited list of users and groups. Example: <br />`    * Set ALLOWTOPICRENAME = Main.SomeGoodGuy, Main.SomeGoodGirl, Main.TWikiAdminGroup`
+
+DENYTOPICRENAME is evaluated before ALLOWTOPICRENAME. Access is denied if the authenticated person is in the DENYTOPICRENAME list, or not in the ALLOWTOPICRENAME list. Access is granted in case DENYTOPICRENAME and ALLOWTOPICRENAME is not defined.
+
+### <a name="Rename Access Restriction for a"></a><a name="Rename Access Restriction for a "></a> Rename Access Restriction for a Whole %WIKITOOLNAME% Web
+
+You can define restrictions of who is allowed to do renames for a %WIKITOOLNAME% web.
+
+Define one or both of these variable in the [[WebPreferences]] topic:
+
+- Set DENYWEBRENAME = &lt; list of users and groups &gt;
+- Set ALLOWWEBRENAME = &lt; list of users and groups &gt;
+
+The same rules apply like the one for Access Control for Individual Topics; with these additions:
+
+- DENYTOPICRENAME (in topic) overrides DENYWEBRENAME (in WebPreferences)
+- ALLOWTOPICRENAME (in topic) overrides ALLOWWEBRENAME (in WebPreferences)
+
 ### <a name="Read Access Restriction for a Wh"></a> Read Access Restriction for a Whole %WIKITOOLNAME% Web
 
 You can define restrictions of who is allowed to view a %WIKITOOLNAME% web.