27 Aug
2009
27 Aug
'09
10:04 p.m.
On Aug 27, 2009, at 9:31 PM, Ludovic Dubost wrote:
Vincent Massol a écrit :
It's not about security risks.
It's about someone on a wiki (let's say Company A) creating a macro
and someone else on another wiki (let's say Company B) will see the
macro created by Company A.
The same reasoning applies for Project A which will see all the macros
created by project B. Imagine I create 10 macros for my own usage and
I call them Test1 to Test10. Suddenly someone who doesn't know me will
see 10 TestN macros in the wysiwyg editor when he tries to insert a
macro. He'll not understand.
Thanks
-Vincent
On Aug 27, 2009, at 9:14 PM, Ludovic Dubost
wrote:
It's a serious limitation no to be able to have a wiki working fine in
XE mode to not work the same in XEM mode.
We absolutely need the macros to work at least for the velocity ones
which don't create any security risks AFAIK. Guillaume Lerouge a écrit :
We don't allow users a local wiki in a farm to create wiki macros for
now since we don't have component isolation yet.
We also force the user to have programming rights.
Future:
- Have component realms, and use a realm per wiki
- To be decided if only admins can create macros
- If not (which is best IMO) then the macros created by a user will
need to be in his realm only (not visible by others) unless some
admin
promote them as global wiki macros in the admin
Hi Ludovic,
On Thu, Aug 27, 2009 at 6:52 PM, Ludovic Dubost <ludovic(a)xwiki.com>
wrote:
> I've tried to create a macro page on myxwiki.org but it does not
> seem to
> be recognized.
>
>
>
That's because you have to create your macro on the main wiki.
Right now
www.myxwiki.org does not seem to have been upgraded to the latest
XAR which
means you can't test it just yet.
Is it ok to put it in the local wiki and what exactly is needed ?
Is
> XWiki.WikiMacroClass enough ?
>
>
>
XWiki.WikiMacroClass is enough but it has to be on the main wiki.
Is this going to change in RC ? It sounds to be the list of macros
should be the sum of the main wiki + the local wiki, possibly with
an
option to tell to ignore the main wiki ones.