Hi xwikiers,
In 10.3 we introduced a warning to discourage users from editing
extension pages (unless the extension indicate it's OK to edit it).
This was a first version to have something in 10.3 but the initial
(vague) plan (for 10.4 this time) base on previous discussions was:
* EDIT right forced false for basic users
* still a warning for advanced users
* various options to change that (EDIT right forced false for
everyone, warning for everyone, etc.)
That was before I actually look at what we can do with our security system :)
Turns out that it's not a huge fan of dynamic criteria like
"basic/advanced user", it's still possible but will require a big of
work. Also since ADMIN imply EDIT forbidding basic admin to edit a
protected document would not exactly be straightforward.
Before starting big stuff I would like to discuss in more details what
we want in the end.
In this mail I would like to focus on default behavior and we can talk
about which options we need to provide in another one:
Note: in all of theses superdamin still have the right to edit
everything (with a warning).
1) Basic/advanced based
1.a)
Forced EDIT right to DENY for basic users.
Edit warning for advanced users.
Forced EDIT right to DENY for basic admins (we overwrite the ADMIN
implied rights logic)
1.b)
Forced EDIT right to DENY for basic users.
Edit warning for advanced users.
Edit warning for admins (they get EDIT trough ADMIN right).
2) Admin right based
2.a)
Forced EDIT right to DENY for everyone
Even admins
2.b)
Forced EDIT right to DENY for everyone
Edit warning for admins (they get EDIT trough ADMIN right).
3) Both
Warning if you are both advanced user and have ADMIN right
Forced EDIT right to DENY for everyone else
WDYT ?
The initial plan was 1.a in my mind but I'm still hesitating. 2.b is
by far the easiest to implement and probably good enough but not sure
having ADMIN right is the right criteria to be allowed to force edit
of protected pages since it's not about security and more about
knowledge.
I'm -1 for 2.a) as a default. It's way too harsh for the product (but
I can understand it as an option in a cloud offering for example).
It's quite young and we will most probably forget to indicate that
some pages are OK for edit for a little while, plus there is Contrib
extensions which will probably never get configured properly because
not really maintained anymore but still used.
In term of refactoring/hacking to the current design the most
dangerous option is working around the imply link between ADMIN and
EDIT rights. The right system was not really designed for
basic/advanced criteria use case but it's OK.
Thanks,
--
Thomas Mortagne
Hi again,
An very important detail that I forgot to remind you (it's mentioned in the
Student Guidelines as well) is that you need to be registered to the
devs(a)xwiki.org mailing list [1] in order to be able to post messages to it.
If you sent the email without being registered, you messages will not reach
the list and we will not be able to see them.
Thanks,
Eduard
----------
[1] http://dev.xwiki.org/xwiki/bin/view/Community/Discuss#HMailingLists
On Thu, May 3, 2018 at 2:58 AM, Алексей Овсянников <
ovsyannikov.alexey95(a)gmail.com> wrote:
> Got it!
>
> On Thu, May 3, 2018, 00:58 Eduard Moraru <enygma2002(a)gmail.com> wrote:
>
>> Hello, GSoC students,
>>
>> As you all know, we are in the middle of the "Community Bonding" period
>> of the GSoC 2018 program's timeline [1].
>>
>> This is a very important period in which you are supposed to get familiar
>> with the XWiki project, read documentation (APIs, processes, development
>> practices, etc.), setup tooling and development environments, figure out
>> the way the project is organized and what is the best approach for you to
>> make an impact. At the end of this period, you should be ready and
>> productive to start working on your cool project. (Nobody will complain if
>> you have already started ;) ).
>>
>> Even more so, the community bonding period is about getting to know the
>> community and helping the community to know you. So, if you have not yet
>> introduced yourself or did not get the chance to exchange some initial
>> thoughts with your mentor(s), now is the time to do it. You need to
>> remember that GSoC is not a bounty program, but a community building one,
>> so the main objective is not simply to deliver, at a certain deadline, a
>> feature, but to be integrated in the open source community you have joined
>> and help it grow (through your contributions).
>>
>> As such, on the technical side, your objective for this period is to get
>> at least 1 of your Pull Requests (average size/complexity, must contain a
>> few lines of code) to get reviewed and accepted either in the main
>> repositories (platform/commons/rendering) or in one of the existing Contrib
>> extensions. The PR needs to be associated to an existing Jira issue
>> (bug/improvement).
>>
>> Make sure you read and follow the Student Guidelines, specifically the
>> section dedicated to accepted students [2].
>>
>>
>> Reminder1: The deadline is the 14th of May.
>>
>> Reminder2: The community bonding period is also an eliminatory period.
>> Students that choose to stay silent may be considered for elimination from
>> the program.
>>
>>
>> Thanks,
>> Eduard
>>
>> ----------
>> [1] https://developers.google.com/open-source/gsoc/timeline
>> [2] http://dev.xwiki.org/xwiki/bin/view/GoogleSummerOfCode/Guidelines#
>> HSuggestedwayofworkingforacceptedGSoCstudents
>>
>
Hi devs,
I’ve recently worked on converting our JUnit4 @Rule rules into JUnit5 equivalent.
There are now equivalent for:
- MockitoComponentManagerRule,
- ComponentManagerRule
- AllLogRule
- MockitoOldcoreRule
See http://dev.xwiki.org/xwiki/bin/view/Community/Testing#HJavaUnitTesting for examples of how to use them.
Feel free to ask here if you have questions or if you have ideas on how to better integrate with JUnit5 (I’m sure we’ll need to perform some tuning and there are use cases that I have forgotten that we’ll need to support).
I’m thus proposing that from now on, we start writing new tests as JUnit5 tests and that we start converting old JUnit3/4 tests into JUnit5 ones. For example if we need to add a method to a JUnit4 test, we convert it to JUnit5 and then add the new test method. It’s pretty simple to do the conversion.
WDYT?
Thanks
-Vincent
Hello, GSoC students,
As you all know, we are in the middle of the "Community Bonding" period of
the GSoC 2018 program's timeline [1].
This is a very important period in which you are supposed to get familiar
with the XWiki project, read documentation (APIs, processes, development
practices, etc.), setup tooling and development environments, figure out
the way the project is organized and what is the best approach for you to
make an impact. At the end of this period, you should be ready and
productive to start working on your cool project. (Nobody will complain if
you have already started ;) ).
Even more so, the community bonding period is about getting to know the
community and helping the community to know you. So, if you have not yet
introduced yourself or did not get the chance to exchange some initial
thoughts with your mentor(s), now is the time to do it. You need to
remember that GSoC is not a bounty program, but a community building one,
so the main objective is not simply to deliver, at a certain deadline, a
feature, but to be integrated in the open source community you have joined
and help it grow (through your contributions).
As such, on the technical side, your objective for this period is to get at
least 1 of your Pull Requests (average size/complexity, must contain a few
lines of code) to get reviewed and accepted either in the main repositories
(platform/commons/rendering) or in one of the existing Contrib extensions.
The PR needs to be associated to an existing Jira issue (bug/improvement).
Make sure you read and follow the Student Guidelines, specifically the
section dedicated to accepted students [2].
Reminder1: The deadline is the 14th of May.
Reminder2: The community bonding period is also an eliminatory period.
Students that choose to stay silent may be considered for elimination from
the program.
Thanks,
Eduard
----------
[1] https://developers.google.com/open-source/gsoc/timeline
[2]
http://dev.xwiki.org/xwiki/bin/view/GoogleSummerOfCode/Guidelines#HSuggeste…
Hi devs,
I’ve started brainstorming about the idea of a Roadmap Application at http://design.xwiki.org/xwiki/bin/view/Proposal/RoadmapApplication
Feel free to comment/edit the page there or add your ideas here.
Disclaimer: I don’t have any time to work on this ATM ;)
Thanks
-Vincent