This is a static dump of issues in the old "Flyspray" bugtracker for DokuWiki. Bugs and feature requests
are now tracked at the issue tracker at Github.
Closed
Not a bug
FS#1803 RSS Feed is NOT protected via credentials
ACL & Authentication
2009-11-17Jones111
The RSS Feed doesn't allow you to use the build-in authentication for the wiki.
This could be a risk in productive environments where some informations on pages are confitential.
Basicly the RSS-Feed will ALWAYS post ALL INFOS of all pages.
Solution 1 (fast):
- Add an option to the admin menu that sets the RSS-Feed -creator on the priviledge level as a specified group (eg @guests)
- Or: Disable any output that is NOT readable for all users.
Solution 2 (clean):
- Enable RSS-Authentication and deliver only public content to users not logged in.
2009-11-17andi
The RSS feed *does* honour authentication. You probably checked the feed with a browser or a feed reader that shares cookies with your browser.
2009-11-17Jones111
That's strange... I'm using Feedreader so how can it get the data from my browser?
2009-11-17andi
That's really strange. Please doublecheck your ACL settings. Are you really running 2009-02-14 or a devel snapshot?