This issue has been created
There is 1 update.
 
 
XWiki Platform / cid:jira-generated-image-avatar-f922100e-e2a1-4918-b382-5c89b0d33e6f XWIKI-22929 Open

It's not possible to update right configurations for non-existent users/groups using standard rights configuration UI

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-9bc5513b-2fa7-4433-93de-584fea24bfc1 Mohamed Boussaa created this issue on 25/Feb/25 13:34
 
Summary: It's not possible to update right configurations for non-existent users/groups using standard rights configuration UI
Issue Type: cid:jira-generated-image-avatar-f922100e-e2a1-4918-b382-5c89b0d33e6f Bug
Assignee: Unassigned
Components: Administration
Created: 25/Feb/25 13:34
Priority: cid:jira-generated-image-static-major-8a9ba9b5-5ffd-449b-a641-562ddae7fd97 Major
Reporter: Mohamed Boussaa
Description:

Currently in XWiki it is possible to configure rights on pages using the standard rights configuration UI or by editing pages in object mode and adding the rights objects, rights can also be configured by some extensions (ex : Confluence Migrator).

In some cases the right configurations are set for entities (user/group pages) that do not yet exists in the wiki. For example an Administrator could import the pages and permissions from confluence using the confluence migrator without creating user pages and rely on the OIDC authenticator to handle the creation of user pages.

The issue with rights set for non-existent users/groups is that these rights are not visible on the standard rights configuration UI, so, it is not possible to remove or update them and this can problematic for Admins knowing that not all Admins are comfortable using the object editor.

Based on that, the rights configuration UI should be fixed/improved to handle non-existent users/groups.

 
 

1 update

 
cid:jira-generated-image-avatar-9bc5513b-2fa7-4433-93de-584fea24bfc1 Changes by Mohamed Boussaa on 25/Feb/25 13:35
 
Description: Currently in XWiki it is possible to configure rights on pages using the standard rights configuration UI or by editing pages in object mode and adding the rights objects, rights can also be configured by some extensions (ex : Confluence Migrator).

In some cases the right configurations are set for entities (user/group pages) that do not yet exists in the wiki. For example an Administrator could import the pages and permissions from confluence using the confluence migrator without creating user pages and rely on the OIDC authenticator to handle the creation of user pages.

The issue with rights set for non-existent users/groups is that these rights are not visible on the standard rights configuration UI, so, it is not possible to remove or update them and this can problematic for Admins knowing that not all Admins are comfortable using the object editor.

Based on that, the rights configuration UI should be fixed/improved to handle
rights set for non-existent users user / groups group pages .