XWiki allows you to control all access permissions at a fine grained level. There are different levels of control and these rights are cumulative. The rights for a page override the rights for a space, which override the rights for a wiki.

Thanks to the three levels of control offered by XWiki, it becomes quite easy to manage places where people are allowed to read, write and comment - or not allowed to go. You can create groups of users in order to manage the rights of a category of people more easily. For instance, say you have managers and staff in the marketing and IT department: you can create a group for the staff on each department and another for managers (4 in all), and a space for every category. Then you can choose to let marketing staff access the marketing space only, but let marketing managers have access to the IT space at the staff level (but not IT manager level), and so on...

Rights at the wiki level

Click on your wiki "Administration" button. On the new skin it's located in the top right corner of the screen. Then click on the "Global Rights" icon as shown in the following image:

Here's how you can change permissions:

• Select the Users or Groups for which you want to set a permission.
  • There are some default users you need to know about:
    • Unregistered Users: represents the anonymous user (i.e., a user not logged in)
    • XWiki.XWikiAllGroup: represents all groups
    • XWiki.XWikiAdminGroup: represents all users with admin privileges
• Click once in a checkbox to allow a right, twice to deny it and three times to clear the right (delete the entry). As a result, rights entries are saved automatically, using the Ajax technology.

Rights at the space level

There are 2 solutions to edit rights at the space level :

1. When you are in the wiki administration, use the select to go to the administration of one of the existing spaces in your wiki.
2. Put your mouse over the "Administration" button at the top right corner of any page and click on "Administrate space : CurrentSpace".

Then click on the "Rights" icon. You will see the following screen :

Then use exactly the same steps as the ones used for changing global rights.

Rights at the page level

Simply navigate to the page for which you wish to change the permissions, Edit the page and then click on the Page Access Rights tab.

Activating CAPTCHAs for anonymous comments

Go to the Rights admin page and tick the Require unregistered users to solve a captcha when posting a comment on a page check box as show on the following image:

Note that you also need to give the Comment right to unregistered users. After you've done so unregistered users will see the following when entering a comment on a page: