You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by Christian Kohlschütter <ck...@rrzn.uni-hannover.de> on 2004/04/22 09:25:15 UTC
Wiki write access
Hello,
I've just noticed that some anonymous stupido modified the FrontPage of the
jakarta-lucene wiki, maybe just for checking if modification works. I have
reverted the changes, noticing that it was possible without any extra
authentication.
Is this behaviour explicitly desired or is it a wiki misconfiguration?
I understand that all Lucene users should be able to modify the wiki's
contents, but at least, they should be forced to create a user profile
beforehand.
Best regards,
Christian
---------------------------------------------------------------------
To unsubscribe, e-mail: lucene-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: lucene-dev-help@jakarta.apache.org
Re: Wiki write access
Posted by Erik Hatcher <er...@ehatchersolutions.com>.
I just forwarded this thread over to the Jakarta PMC list to inquire
about other wikis and whether this is a reasonable requirement for
write access. I'm fine with it personally - but it is still only a
minimal road-block for vandals. Enforcing a "valid" e-mail address is
probably asking for too much - I'm not sure though.
Erik
On Apr 22, 2004, at 6:26 AM, Christian Kohlschütter wrote:
> On Thursday 22 April 2004 12:10, Erik Hatcher wrote:
>> On Apr 22, 2004, at 3:25 AM, Christian Kohlschütter wrote:
>>> Is this behaviour explicitly desired or is it a wiki
>>> misconfiguration?
>>>
>>> I understand that all Lucene users should be able to modify the
>>> wiki's
>>> contents, but at least, they should be forced to create a user
>>> profile
>>> beforehand.
>>
>> I am pretty certain this behavior is by design. Even requiring a
>> profile wouldn't prevent vandals creating a bogus profile.
>>
>> The diffs are sent to the e-mail list for this very reason -
>> oversight.
>>
>> Erik
>
> I think that requiring a user profile with a valid email address and
> password
> usually would reduce possible spamming (like mailing list
> subscriptions), as
> you can easily identify the culprit.
>
> However, I was just curious about this.
>
> Christian
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: lucene-dev-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: lucene-dev-help@jakarta.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: lucene-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: lucene-dev-help@jakarta.apache.org
Re: Wiki write access
Posted by Christian Kohlschütter <ck...@rrzn.uni-hannover.de>.
On Thursday 22 April 2004 12:10, Erik Hatcher wrote:
> On Apr 22, 2004, at 3:25 AM, Christian Kohlschütter wrote:
> > Is this behaviour explicitly desired or is it a wiki misconfiguration?
> >
> > I understand that all Lucene users should be able to modify the wiki's
> > contents, but at least, they should be forced to create a user profile
> > beforehand.
>
> I am pretty certain this behavior is by design. Even requiring a
> profile wouldn't prevent vandals creating a bogus profile.
>
> The diffs are sent to the e-mail list for this very reason - oversight.
>
> Erik
I think that requiring a user profile with a valid email address and password
usually would reduce possible spamming (like mailing list subscriptions), as
you can easily identify the culprit.
However, I was just curious about this.
Christian
---------------------------------------------------------------------
To unsubscribe, e-mail: lucene-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: lucene-dev-help@jakarta.apache.org
Re: Wiki write access
Posted by Erik Hatcher <er...@ehatchersolutions.com>.
On Apr 22, 2004, at 3:25 AM, Christian Kohlschütter wrote:
> Is this behaviour explicitly desired or is it a wiki misconfiguration?
>
> I understand that all Lucene users should be able to modify the wiki's
> contents, but at least, they should be forced to create a user profile
> beforehand.
I am pretty certain this behavior is by design. Even requiring a
profile wouldn't prevent vandals creating a bogus profile.
The diffs are sent to the e-mail list for this very reason - oversight.
Erik
---------------------------------------------------------------------
To unsubscribe, e-mail: lucene-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: lucene-dev-help@jakarta.apache.org