Loading...
 
Features / Usability

Features / Usability


How to show left-hand modules only to authenticated users

posts: 2

I've been trying to make it so that my side modules are only visible to authenticated users. I tried going to the modules admin area and setting their permissions to Registered and Admin groups, but that didn't seem to make any difference. The problem I'm having is that some of my modules might show some information that I don't want to become available to Google's indexer. For example, I have the Last pages and the Top pages modules, and in the event that a page's title ever had sensitive information on it, I don't want it to be accessible to unauthenticated users.

Thanks for your help.

Carl Youngblood

posts: 2881 United Kingdom

Hi There

On Admin->General you will need to uncheck the Show All Modules to All Groups checkbox.

Also invest plenty of time adding and tweaking a robots.txt file!

Damian


posts: 63 United Kingdom

Be aware of the problems using the search feature then - if you use it.

The search faeture shows titles and excerpts from pages which contain data matching you search criteria (In a round about sort of way).

The information showed on the search results page does not get parsed for permissions yet, so if you have a wiki with "For your eyes only information - how to destry the opposition our top-secret 5 year plan..." on it. Anyone, yes ANYONE searching for these phrases could see the title and a short excerpt from that page - even if it has per-object permissions restricting them from viewing the whole document.

My advice,

  1. Like "The Man" said, set your robots.txt file up well,
  2. Spend some time using .htaccess or whatever preventing the use of unknown browsers (evil web-spiders etc who may download your entire site - just for a look)
  3. Disable the search feature until it's had a complete overhaul.


and good luck!


posts: 2
Okay, thanks for the info. I've got another problem. I just unchecked "Show all modules to all groups" and stupidly logged out before I made the login module visible to all users. Now I can't log in. I tried editing the mysql db manually and changing modallgroups to "y" in the tiki_preferences table (a shot in the dark) but that didn't seem to change anything.

posts: 1001 Canada
Strange...use tiki-login_scr.php meanwhile.