Sharing private Tiddlywikis

[LaRocca89]

I suggest allowing users to share or collaborate on private tiddlywikis.

[simonbaird]

See also #164.

Collaborating on a single TiddlyWiki is difficult, though maybe not impossible, due to the single user nature of TiddlyWikis on Tiddlyhost.

[simonbaird]

223 is similar also. This is probably the most requested feature currently.

[simonbaird]

There's a few variations I think:

1. View only:
   1. The private wiki can be shared for view only for anyone with a token.
   2. The private wiki can be shared for view with certain other Tiddlyhost users.
2. View and edit:
   1. The private wiki can be shared for view and edit for anyone with a token.
   2. The private wiki can be shared for view and edit with certain other Tiddlyhost users.

Option 1.a is probably a good starting point and would be the most useful to begin with.

The 2 options are quite difficult as I mentioned above.

[simonbaird]

As mentioned in #312 , if you encrypt your TiddlyWiki, then save it, as per https://tiddlywiki.com/#Encryption it gives you share its content with only people who know the encryption password.

[simonbaird]

I've tentatively started doing some work on a token based approach, which should enable option 1.i and 2.i.

[Jasper359]

Hi Simon, thanks for persisting with this work and I've sponsored you. Please keep up the good work.

What is a token based appoach if it can be explained simply?

I was coming at it from a cloud storage persepctive whereby an cloud storage file owner shares a file with one or more other cloud storage users - with readand/or read access -there by other users cannot see or have access to the tiddlywiki file. But does this require tiddlyhost to own the cloud storage system?

I see Jeremy discussing an node.js approach at https://talk.tiddlywiki.org/t/multi-user-alternative-to-tiddlywiki/2899/18 and wonder if that is releveant to a tiddlyhost.com approach?

Regards, Jasper359

[simonbaird]

I'm still figuring out the details, but here's a rough idea of how it could work:

• There's a new page where you can create an access token and see a list of your existing tokens. You can also delete existing tokens.
• When you create a token you specify an expiry date and also specify what permissions are asociated with the token, e.g. read access (for private sites) or write access to one or more of your sites.
• There'll be a button to copy a link, something like https://mysite.tiddlyhost.com/?access_token=some-long-random-string you can then send that link to the person you want to share the access with.
• When the person clicks on that link they're granted the permission that you assigned to that token, whether it be read access or write access.

This means the other user doesn't need to have a Tiddlyhost account.

The idea of giving access to other users specifically could work though. Maybe something like this:

• There's an additional option under the actions menu called "Share access".
• If you click on that you enter an email address.
• Tiddlyhost sends an email to the address you entered explaining that you want to share a Tiddlyhost site with them, and providing a link they can click to "activate" the sharing invitation.
• The user would need to already have a Tiddlyhost account, or they would need to create one to access the site you're sharing.

I guess this could be simplified by skipping the email and the "activation" step. You'd have to be careful to use the correct email address.