This is a static dump of issues in the old "Flyspray" bugtracker for DokuWiki. Bugs and feature requests are now tracked at the
issue tracker at Github
Not a bug
FS#1803 RSS Feed is NOT protected via credentials
ACL & Authentication
The RSS Feed doesn't allow you to use the build-in authentication for the wiki.
This could be a risk in productive environments where some informations on pages are confitential.
Basicly the RSS-Feed will ALWAYS post ALL INFOS of all pages.
Solution 1 (fast):
- Add an option to the admin menu that sets the RSS-Feed -creator on the priviledge level as a specified group (eg @guests)
- Or: Disable any output that is NOT readable for all users.
Solution 2 (clean):
- Enable RSS-Authentication and deliver only public content to users not logged in.
The RSS feed *does* honour authentication. You probably checked the feed with a browser or a feed reader that shares cookies with your browser.
That's strange... I'm using Feedreader so how can it get the data from my browser?
That's really strange. Please doublecheck your ACL settings. Are you really running 2009-02-14 or a devel snapshot?