30 Sep
2011
30 Sep
'11
5:18 p.m.
Hi,
I agree with this, especially given the use case described by Dimitry a
couple weeks ago where an user with edit rights on a page were able to give
himself the right to delete it. In addition to this, it's quite rare to have
to assign this right at page level. "Delete" is a clean-up right that
usually makes sense at the space level (at least), less so at the page
level.
Side question: does this have an impact on the right to rename a page? Is
the "rename" right mapped to the edit or the delete action?
So I'm +1 to remove the "delete" right at document level.
Guillaume
On Fri, Sep 30, 2011 at 4:32 PM, Sergiu Dumitriu <sergiu(a)xwiki.com> wrote:
Rights have different scopes in XWiki. Administration
rights can only be
set on a space or wiki level, and any "admin" right set on a document
alone will be silently ignored. Programming rights are only considered
when set on the xwiki:XWiki.XWikiPreferences document, being ignored in
any other virtual wiki and at the space or document level.
Delete rights are a bit special as well. By default, the creator of a
document has delete rights on that document. Unlike the other rights
which default to true when no right is set, this one defaults to false.
So, by default, when no "delete" rights are set on the
document/space/wiki, only the creator of a document and administrators
are allowed to delete it.
Should we allow setting the delete right at the document level?
Personally, I'd say no, since it's a rare requirement for a non-creator
to be able to delete just one document. Space-level rights should be
enough, IMO.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs