Still seems to be a problem with Mountail Lion!
Does the fix suggested by attymullins still wrok with Mountain Lion?
Yes, EXCEPT, the location of people_controller.rb has moved. it is now in:
Be suere to review the file EVERY time apple updates Server.app!
There is a "master switch" you can use to disable people view everywhere.
It's in the OS X Server: Advanced Administration Guide
You can change wiki service settings by editing plist files.
You can change the following settings by editing /Library/Server/Wiki/Config/collabcored.plist
Set this to true to disable the Wikis page in the wiki. Set this to false to enable the Wikis page in the wiki.
This is what I found out too. In fact, I originally thought the fix didn't work with Mountain Lion until I read this thread. I guess for now I will set the permissions to my Wiki to be non public. However, eventually I will likely want to make it public, and then I'll have to decide how to protect the privacy of the users.
I guess one option would be to set up a second server, one for interal and one for external.
Playing with this some more today and was amazed and how this is designed, not in a good way either. I set disable_people_view to true and then brought of the Wiki (after restarting the service). While people pages and my user settings, etc., no longer displayed, if I click on All Activity from the home page, even as an unauthenticated user, I can still see the blogs.
Editing the people_controller.rb as described above gets the closest to making blogs private but these are still visible to iPad (and I assume other mobile devices).
Disturbing. I guess I'll got the route of create a special wiki for my own personal private use, and leave the blog open for information I am comfortable having others read.
I am going to add another twist to this. Would be interested in knowing if someone else gets similar behavior.
I created a private wiki for just me so I could move my content I did not want public to even iPad users. I moved two blog entries to this new wiki. And, when I went back in to look from the iPad as an unauthenticated user, none of the content was visible except for my main page (People).
The server doesn't prompt the unauthenticated user to log in, it just doesn't display the content. This behavior differs from a full up Mac/Safari set up when the user is prompted to log in when trying to access any content.
Things that make you go, "hmmmmmmmm".