WikiPatches/RestrictPages

To allow our documentation space (using usemod) to be restricted read access I created this barely functional patch. It reads from $RestrictFile? ($DataDir/restrict) and sees a regexp it matches against page ids. If not matched, the page is viewed. If the page id is matched, it checks the next part of the line of restrict, and sees if $UserData{'username'} matches what is listed there. If so, the page is viewed. If not->NotFound? page -- TravisB? 8/31/05

Usage:

• Set $RestrictPages? =1 in config
• Create a file in the Data dir with lines like:

 WikiPatches  TcB?  Friend
 ^Plans.*  TcB? Ren Stimpy

• The first word (non-space) is plugged into a regexp match on the page id.
• The second through nth words (break on space) are the users names who can access the page.

Bugs/Enhancements?:

• It would be better if it also restrcted edits, but actually it only restricts browses. This keeps regular folks away, but is nothing near secure. Using some other login scheme would also imrpove security. This is for when you want a little private room for a few moments, and you don't mind if it has very thin walls.
• It uses space as the delimiter in $RestrictFile? so spaces aren't allowed in the user names
• Because of where I put this, if the user requests a systempage like RecentUpdates? that wiki.pl catches and serves differently, this patch thinks the file can't be found and returns "NotFound?" This should be simple to fix, but you can also get around it by making a page by that name that is blank.

---

*** 50,57 ****
    $NumberDates $EarlyRules $LateRules $NewFS $KeepSize $SlashLinks $BGColor
    $UpperFirst $AdminBar $RepInterMap $DiffColor1 $DiffColor2 $ConfirmDel
    $MaskHosts $LockCrash $ConfigFile $HistoryEdit $OldThinLine 
!   @IsbnNames @IsbnPre @IsbnPost $EmailFile $FavIcon $RssDays $UserHeader
!   $UserBody $StartUID $ParseParas $AuthorFooter $UseUpload $AllUpload
    $UploadDir $UploadUrl $LimitFileUrl $MaintTrimRc $SearchButton 
    $EditNameLink $UseMetaWiki @ImageSites $BracketImg );
  # Note: $NotifyDefault is kept because it was a config variable in 0.90
--- 50,59 ----
    $NumberDates $EarlyRules $LateRules $NewFS $KeepSize $SlashLinks $BGColor
    $UpperFirst $AdminBar $RepInterMap $DiffColor1 $DiffColor2 $ConfirmDel
    $MaskHosts $LockCrash $ConfigFile $HistoryEdit $OldThinLine 
!   @IsbnNames @IsbnPre @IsbnPost $EmailFile $RestrictFile $FavIcon $RssDays 
! $UserHeader
!   $UserBody $StartUID $ParseParas $AuthorFooter $UseUpload 
! $RestrictPages $AllUpload
    $UploadDir $UploadUrl $LimitFileUrl $MaintTrimRc $SearchButton 
    $EditNameLink $UseMetaWiki @ImageSites $BracketImg );
  # Note: $NotifyDefault is kept because it was a config variable in 0.90
***************
*** 132,137 ****
--- 134,141 ----
  $TableSyntax = 1;           # 1 = wiki syntax tables, 0 = no table syntax
  $NewFS       = 0;           # 1 = new multibyte $FS,  0 = old $FS
  $UseUpload   = 0;           # 1 = allow uploads,      0 = no uploads
+ $RestrictPages=0;           # 0 disable, 1 use restrict file for pages
+                                                     
  
  # Minor options:
  $LogoLeft     = 0;      # 1 = logo on left,       0 = logo on right
***************
*** 208,213 ****
--- 212,218 ----
  $RcOldFile   = "$DataDir/oldrclog"; # Old RecentChanges logfile
  $IndexFile   = "$DataDir/pageidx";  # List of all pages
  $EmailFile   = "$DataDir/emails";   # Email notification lists
+ $RestrictFile= "$DataDir/restrict"; # regexps for restricted pgs, and userids
  
  if ($RepInterMap) {
    push @ReplaceableFiles, $InterFile;
***************
*** 491,502 ****
--- 496,524 ----
    }
    return 0;  # Request not handled
  }
+ sub CheckPageAllowed{
+     my ($id)=@_;
+     return 1 unless $RestrictPages;
+     my $data=&ReadFileOrDie($RestrictFile);
+     foreach my $line(split /\n/,$data){
+ 	my ($pattern,@users)=split / /, $line;
+ 	next unless $id =~ m/$pattern/;
+ 	&LoadUserData();
+ 	return 1 if grep {$UserData{'username'} eq $_} @users;
+ 	return 0;
+     }
+    return 1;
+ }
  
  sub BrowsePage {
    my ($id) = @_;
    my ($fullHtml, $oldId, $allDiff, $showDiff, $openKept);
    my ($revision, $goodRevision, $diffRevision, $newText);
  
+   if (! &CheckPageAllowed($id)){
+       $id = $NotFoundPg;
+       $id= $HomePage unless $id;
+   }
    &OpenPage($id);
    &OpenDefaultText();
    $openKept = 0;