On 04/05/2013 02:46 PM, Denis Gervalle wrote: Hm, I don't really like this. "creator" doesn't sound like a right to me. When speaking about rights in Real Words, you would say that "X has the right to `view', `edit', and `creator' on this page". And that doesn't sound quite English to me. I was envisioning "creator" not as a special right, but as a special username, like XWiki.XWikiGuest used to be. The advantage of a "creator" pseudo role is that we can set rights at different levels, so for example we can say that in the `XWiki' space (or `Users' at a later time), creators should be allowed to edit and delete their documents (which means their profiles), and this would remove the need to always add two rights objects on their profiles. It also allows to globally allow or disallow the delete right to creators. Why hard-code the fact that document creators are allowed to delete their own documents? If we want to ensure non-repudiation for user's actions it's mandatory not to be allowed to delete documents. The main disadvantage is that there's another special name that must be processed securely (i.e. don't confuse creator rights with the rights for a user named creator). -- Sergiu Dumitriu http://purl.org/net/sergiu