Currently in XWiki it is possible to configure rights on pages using the standard rights configuration UI or by editing pages in object mode and adding the rights objects, rights can also be configured by some extensions (ex : Confluence Migrator). In some cases the right configurations are set for entities (user/group pages) that do not yet exists in the wiki. For example an Administrator could import the pages and permissions from confluence using the confluence migrator without creating user pages and rely on the OIDC authenticator to handle the creation of user pages. The issue with rights set for non-existent users/groups is that these rights are not visible on the standard rights configuration UI, so, it is not possible to remove or update them and this can problematic for Admins knowing that not all Admins are comfortable using the object editor. Based on that, the rights configuration UI should be fixed/improved to handle non-existent users/groups. |