26 Sep
2013
26 Sep
'13
3:19 p.m.
Hi Guillaume,
IMO the XWiki.Admin user should not be any where, in any package since this
could cause more trouble than it solve, like leaving an admin account
unsecured, resetting password of the admin account, etc...
IMO, this is the job of the DW to propose the creation of an admin account
when appropriate and securing it properly immediately.
So, if you go for this change, I think removing it would not require more
work, apart from the DW adaptation and it could be adapted depending of the
usage (workspace or farm).
WDYT ?
On Thu, Sep 26, 2013 at 3:05 PM, Guillaume "Louis-Marie" Delhumeau <
gdelhumeau(a)xwiki.com> wrote:
Issue :
* Since XWiki.Admin is packaged in xwiki-platform-administration-ui, it
comes with xwiki-enterprise-ui-wiki (which is the subwiki default UI).
* XWiki.Admin is a member of XWiki.XWikiAdminGroup and XWiki.XWikiAllGroup,
which are also bundled in xwiki-platform-administration-ui.
* WorkspaceManager.Install removes XWiki.Admin from workspacetemplate, in
order to not have local admin in new workspaces.
* When we upgrade subwikis, DW does not install XWiki.Admin (DW is aware
that the user has been intentionally removed), but the merge of
XWiki.XWikIAllGroup does no work well : it add XWiki.Admin to the group.
* That leads us to: http://jira.xwiki.org/browse/XWIKI-9501 (The local
admin does not exist, but she is a member of XWiki.XWikiAllGroup).
+ I think the WorkspaceManager.Install trick is not clean.
My proposal is to *move XWiki.Admin to XE mainwiki*.
But it breaks the *functional tests* that needs to *log-in as *an admin. It
can be solved by using the *superadmin*!
+ When DW does the first install, it should use superadmin too, so all
default macros come with the rights of superadmin.
Here is my +1.
Thanks,
Louis-Marie
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
--
Denis Gervalle
SOFTEC sa - CEO
eGuilde sarl - CTO