OKay Sorry of I seem to be spamming the forum here but these are sll different issues (honest). I was looking at the current security model for the wiki it self it is possible to assign edit privileges for the wiki content that are different to the main portal but what about the ability to leave comments currently once this is turned on it is on for all users who are able to see the wiki, same with ratings.

This means that only allowing tursted users to add to the wiki could all be for moot given the open nature of the comments. This is somthing that I have to address as working within a university you have to pretty much assume students will do the innapropriate thing, I was think about firstly assigning privileges to both rating and comments individually in the same manner as the main wiki edit privileges. Another option I was looking at was for a moderated commenting system.

Is this going too far or would others be able to make use of this level of control? Has anyone done somthing like this yet?

Hi Chris, I'm going to have to take a close look at this bit at the moment as the current model isn't working properly on our installations it is fine if it holds to the module editors role but if you chose tolet it use it's own permissions it seems inconsistent with who is able to see the topic edit button.
I'm trying to work out whether it is to do with the authentication providers in use or somthing else.

I'll give you an update soon.

Update , I have a fix for this. I'm not sure if the bug has always been there or if it has just become apparent with the core adjustment of the authentication providers

In Router.asc.vb  line 92 currently  reads

If Context.User.IsInRole(role) Then

it should be

If Me.UserInfo.IsInRole(role) Then

This seems to have solved the issue at my end out of interest was this legacy code from the original wiki before ktomics branch or was this from ktomics?