Re: [xwiki-devs] Security concerns

There is no macro block author / owner directly associated afaik. What you have is a "source" meta data on the XDOM (that contains the macro block) which specifies the document the content (including the macro) comes from. The author of the source document is considered the author of the macro, but in practice this is not true most of the time as you can edit a document without touching the macros. Vincent and ThomasM know best how macro blocks work but unfortunately both are in holidays right now. On the same topic, if I understood correctly, ThomasD handled the macro author / owner "issue" in his branch for signed scripts (to fix programming rights issues) by adding a signature object to the document containing the (script) macro. The signature includes the last author and he makes sure the signature is updated whenever the (script) macro content is edited. Hope this helps, Marius On Tue, Aug 13, 2013 at 2:07 PM, Christian Meunier <christian.meunier(a)magelo.com> wrote: