Read about the big picture in Security 2.3 Howto.

In the following examples we assume you use jspwiki.applicationName = JSPWiki in your jspwiki.properties.

Groups#

To assign privileges to a wiki group in 2.4 edit jspwiki.policy like this:

grant signedBy "jspwiki",
  principal com.ecyrd.jspwiki.auth.GroupPrincipal "Admin" {
    permission com.ecyrd.jspwiki.auth.permissions.AllPermission "JSPWiki";
};

You can use any other permission like in the other examples in the same file. AllPermission is pretty much for normal groups.

Single Users#

To assign privileges to a wiki user in 2.4 edit jspwiki.policy like this:

grant signedBy "jspwiki",
  principal com.ecyrd.jspwiki.auth.WikiPrincipal "John Doe" {
    permission com.ecyrd.jspwiki.auth.permissions.AllPermission "JSPWiki";
};

Replace John Doe with the full name of the wiki user to assign privileges to.

After editing jspwiki.policy#

After you are done editing don't forget to restart Tomcat to make the changes work.