This issue has been created
 
 
Publication Workflow Application / cid:jira-generated-image-avatar-f5d60943-0aa5-4096-ac51-c317907fa676 XAWORKFLOW-116 Open

Only publishers should be able to unpublish

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-de706a15-a993-4d1f-9da8-635067d8df44 Clemens Robbenhaar created this issue on 12/Nov/24 11:57
 
Summary: Only publishers should be able to unpublish
Issue Type: cid:jira-generated-image-avatar-f5d60943-0aa5-4096-ac51-c317907fa676 Bug
Affects Versions: 2.4.1
Assignee: Unassigned
Created: 12/Nov/24 11:57
Priority: cid:jira-generated-image-static-major-a9ae0e6c-fe07-423f-91c0-a411c78b9989 Major
Reporter: Clemens Robbenhaar
Description:

Currently users which have only contributor status can unpublish or archive an already published document.

This seems to be the case from one of the first commits (the second one if I count correctly):

https://github.com/xwiki-contrib/workflow-publication/commit/9fb54cfa3f6e184fa8f903b5a80ef1120ddc2e0a

 

While this might have been ok for pages that are published "in place" (ie. only validated without being published to the target page), it is not a good use case for target pages, as it allows contributors to remove content that has already been validated and published. Contributors should not be able to do that, same as they are not able e.g. to remove sections from that page without review. This should only be allowed for publishers.