bob is a member of group household
alice is a member of groups users, household
bob can create and edit files in namespace private
It appears that only the first group in the list of groups for a user is recognized or that the effective permissions for a user that is a member of multiple groups is a logical AND of all the permissions of all the groups.
The documentation in manual->DokuWiki Administration->...about permissions->Access Control with ACL is not clear to me on exactly how it is supposed to work.
:) It's either a documentation bug or a functional bug. go figger!
I do have a circumvention: specify a special group where bob and alice are members and are members of only that group where that group has the desired permissions.
For the small site that I have (now) this will work and will not be difficult to administer. I can envision a scenario where with a large number of namespaces and a large number of users where different namespaces are to be accessable to only some that it becomes unmanageable.
What I have works for now. Thanks!
You missed the asterisk after the colon:
private:* @household 8
With that I cannot reproduce your problem.
Alternatively you can always use the ACL manager (with which you can at least be sure not to make any syntax errors).