Item11448: Implement {GuestCanComment} feature.

The {GuestCanComment} feature is not implemented beyond the settings in Foswiki.spec.

Comment.pm needs to test that unless GuestCanComment is set, then the user must be authenticated. If not authenticated, then redirect the request from rest to restauth so that the user is prompted for a login.

Not sure what this does with ajax operation, and should it redirect, or just fail when running as ajax?

-- GeorgeClark - 16 Jan 2012

I'm doubting the {GuestCanComment} configure checker's error message when restauth is not in {AuthScripts}.

This could permit commenting by unauthorized users

I began to re-word the message along the lines of 'If {GuestCanComment} and WikiGuest has CHANGE permission, unauthenticated users may be able to comment' but then this is true anyway when rest itself isn't listed {AuthScripts}.

Anyway, it's not unauthorized users that's a problem, but unauthenticated ones.

-- PaulHarvey - 22 Feb 2012

Commenting is disabled while not logged in