Hi Caleb,
Just to replay what I have said on IRC yesterday, if we had created a
"create" right since the beginning, this one would not have been implied by
edit, but exactly the reverse. Edit would have been implied by create,
since there is no use case were you want to be able to create but not save
the document.
On the other hand, implying create when you have edit does not really allow
to do anything useful with the create right itself. Having create without
edit making no sense. So, for me, this way to do is a no go unless you
bring more evidence that this is required. IMO, the create action may be
check against edit right at the space level (I know the current
implementation is badly design for that, but this is another question).
Now, since we are at a major release, we may decide to introduce "create"
as a new major right. This bring a new interesting feature, where user will
be able to edit but not create. It will require an UI update (that is also
to be planed when the new right module is used to support dynamic rigths),
a check against create when editing a new document (using edit action), and
a migration procedure for existing wiki to convert edit into create.
+1 for a new create right implying edit (but I would advice waiting for the
new security module), and currently -1 for the opposite.
Regards,
On Fri, Mar 15, 2013 at 1:44 AM, Caleb James DeLisle <
calebdelisle(a)lavabit.com> wrote:
Hi,
I would like to fix
http://jira.xwiki.org/browse/XWIKI-8892 by making a
distinct "create" right.
Currently "create" is an alias for "edit" which fails if CreateAction
is
called on an existing
document. CreateAction and the accompanying UI expect to be called on an
existing document and
for the name of the new document to be passed in a form parameter.
I'm proposing adding a create right which aliases to "edit" on the space
and wiki level but is
not checked on the per-document level.
WDYT?
Caleb
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
--
Denis Gervalle
SOFTEC sa - CEO
eGuilde sarl - CTO