Page Permissions

calguy1000 · Post by **calguy1000** » Thu Oct 14, 2004 8:39 pm

Hi guys

Is there any way to allow access to certain pages to members of specified groups, or to specified users...).

I'd kinda like to have a members only area, etc.

Ted · Post by **Ted** » Thu Oct 14, 2004 10:20 pm

Specified users can be set in the Advanced tab of the edit content. I never thought about doing groups. That's probably a good idea.

calguy1000 · Post by **calguy1000** » Fri Oct 15, 2004 2:57 pm

Yes, but this controls who can edit the page, not who can view it....

mind you this would require a login page, for all users.... and maybe a registration page..... hmm, maybe fool around with doing that myself.

Ted · Post by **Ted** » Fri Oct 15, 2004 3:09 pm

Oh, front end users. Yeah, we haven't really gone in that direction yet. It sort of pulls us away from being a simple content CMS into a full-blown portal application, ala Mambo, Postnuke. The idea, at least initially, is to sort of serve this niche audience. Though, if there was contributed code, I wouldn't turn it down.

calguy1000 · Post by **calguy1000** » Fri Oct 15, 2004 3:23 pm

Yeah, I'm not looking for a full blown portal, all i need to be able to do is limit a few pages to a few authorized people on my family site (file exchanges, etc, etc).

I don't even need a register page, just a login ability and that's about it. so shouldn't be that hard to implement....

k, that's it, I'm getting started.

Ted · Post by **Ted** » Fri Oct 15, 2004 3:39 pm

Before you go too crazy, just give me an idea of how you want to do it. Using the same users table and writing it into the core of the site? Or making it a module somehow? Any details would be good, just so it's easy to integrate later on down the road. Here is good. IRC is good too.

Thanks!

Thijs · Post by **Thijs** » Fri Oct 15, 2004 4:20 pm

One way to do it (I guess) is to make a module of an .htaccess & .htpasswd writer such as http://www.net-track.ch/opensource/authman/

This has the advantage that it's quick and easy, since no alteration of CMS is needed. The downside is that it only works with apache and will, in combination with CMS, either grant or deny access to all pages (since all pages are generated from one file).

calguy1000 · Post by **calguy1000** » Fri Oct 15, 2004 4:46 pm

Welll......

would like to have it integrated into the site, using .htaccess doesn't solve the problem of allowing certain users access to certain pages....

wether to do it as a module, I'm checking in to now, get back at ya on that one.

calguy1000 · Post by **calguy1000** » Fri Oct 15, 2004 5:01 pm

Well, I guess one easy way to do the same thing would be to install cms twice
in two directories with two databases, or different database prefixes, etc.

and to link one site to the other. The second location could be secured using .htaccess

Ted · Post by **Ted** » Fri Oct 15, 2004 5:15 pm

I'm not totally thrilled with the idea of .htacess, BUT, what about if you use the mod_rewrite ability. Does the perm checking happen before or after mod_rewrite does it's thing? Then you could cut off access to protectedpage.shtml and not homepage.shtml.

CMS Made Simple Forums