Feedback from moin 2.0 alpha / beta / rc testing

[ThomasWaldmann]

If you test moin2 and find something strange / remarkable:

• if you're sure it is a bug, check our issue tracker, if somebody already has reported it. if not, file an issue.
• otherwise, if you aren't sure, if you have questions or other feedback, post below!

When posting feedback about moin2 testing, please always specifiy your precise moin2 version!

[wlugmayr]

I installed moin2 as described here and imported the moin 1.9.11 wiki data.
I set me and the people in the EditorGroup as follows:
before='me_changedr:read,write,create,destroy,admin',
default='EditorGroup:read,write,create All:',
Now all user data are not readable for an unregistered users.

Unfortunatly the history page and the index pages can be accessed by anybody.
How do I turn this off?

pip list | grep moin
moin 2.0.0a1
XStatic-svg-edit-moin 2012.11.27.1

[ThomasWaldmann]

There is no way to turn off history/index, but these pages should not show information that the user isn't permitted to read. If that is the case, file an issue please.

[wlugmayr]

Thanks, the specific pages had wrong ACLs. This could be fixed by modifying the ACL of the page. But the attachments of this page were still visible and this could be fixed by re-uploading the PDF and correcting the ACLs of the attachment.

[5u623l20]

I am a member of the wiki@ team for FreeBSD and was working on porting MoinMoin2 into the ports tree so that we can also work on setting up an instance to migrate the data. However, MoinMoin2 is heavily dependent upon Xstatic packages, which do not seem to have an active upstream, as there has been no activity in their repo since last year. What's your take on this? I know that at the moment, MoinMoin2 is heavily undermanned for developments, but I am just curious to know and understand as there might be security concerns about the Xstatic packages. I have already reported one, specially for the Xstatic-bootstrap.