PmWiki: Passwords

PmWiki has built-in support for password-protecting various areas of the wiki site. Passwords can be applied to individual pages, to WikiGroups, or to the entire wiki site. Note that the password protection mechanisms described here are only a small part of overall system (and wiki) security, see PmWiki.Security? for more discussion of this.

PmWiki supports multiple types of access to wiki pages:

read passwords allow viewing the contents of wiki pages

edit passwords control editing and modification of wiki pages

attr passwords control who is able to set passwords on pages (and potentially other future attributes)

upload passwords control access to the file upload capabilities (if uploads are enabled)

Finally, there is an admin access for the entire wiki site that allows an administrator to override the passwords set for any individual page or group.

To set a password on an individual wiki page, add ?action=attr to the page's URL (address) to access its attributes. You may be prompted for a username and password; the username field isn't used by PmWiki. You can enter either an admin password or you can enter the attr password in effect for that page. From the attributes page you can then set or clear the read, edit, or attr passwords on the page. In the attributes form you enter the passwords as cleartext; PmWiki will encrypt them for you automatically.

To set passwords for an entire WikiGroup, edit the attributes of the GroupAttributes page within the group. For example, to change the attributes for the PmWiki group you would modify the attributes of PmWiki.GroupAttributes.

In PmWiki, page passwords override group passwords, group passwords override the default passwords, and the admin password overrides all passwords. This gives a great deal of flexibility in controlling access to wiki pages in PmWiki.

The special password "nopass" can be used to create non-password protected pages within password-protected groups, or a non-password protected group within a password-protected site.

By default, PmWiki is configured with empty read and edit passwords for the whole site (allowing anyone to view or edit pages), the attr password is locked for the Main and PmWiki groups, and the admin password is locked entirely. For more information on setting the admin or global site passwords, see PmWiki.PasswordsAdmin.

<< WikiGroups | PmWiki.DocumentationIndex | WikiTrails >>