[xwiki-devs] [VOTE] Allow "delete" right by default

Sergiu Dumitriu sergiu at xwiki.com
Thu Feb 23 18:13:16 UTC 2012


On 02/23/2012 12:24 PM, Vincent Massol wrote:
> I'd also prefer to force using the superadmin user in an empty wiki and don't give any rights by default to the guest user.
>
> What Thomas raised was only for consistency indeed.
>
> I personally needed to write a test in an empty wiki where I needed to delete a page. Here's what I tried:
> * Deleting the page with guest lead to the Login page
> * Registering a user and trying to delete the page with it leads to a permission error ("you don't have the permission blah blah")

You should be able to delete the document if you used the same user to 
create it.

> What I'm doing now is log with the superadmin user which I guess is the best  in the end.
>
> The alternative is to register a user and explicitly give it the delete right or make it admin.
>
> Back to the VOTE, I agree that it's not good to implement and I'm also -1 now since it would cause changes to existing wikis as Denis and Thomas explained.
>
> Thanks
> -Vincent
>
> On Feb 23, 2012, at 6:13 PM, Andreas Jonsson wrote:
>
>> -1
>>
>> As I see it, it is the fact that admin right is allowed by default that
>> is an irregularity.  Currently, the initial import relies on these
>> default admin rights, and it is expected that the imported contents
>> configure the admin right appropriately.
>>
>> In a standard wiki-setting, I would expect that "delete", "admin", and
>> "programming" are denied to most users and it seems to me natural that
>> the default is "deny" for these.  So if this is a matter of consistency,
>> I would rather see a new mechanism (e.g., a special "uninitialized"
>> state of the wiki) to make it possible to change the default to "deny"
>> also for admin rights.
>>
>> Best Regards,
>>
>> Andreas
>>
>> 2012-02-23 16:02, Thomas Mortagne skrev:
>>> Right now on an empty wiki you have all the rights except "delete"
>>> (and register).
>>>
>>> So this means that you have "admin" right but you don't have "delete" rights...
>>>
>>> This does not make much sense and I anyway I don't see why delete has
>>> this special rule.
>>>
>>> Any idea ?
>>>
>>> Here is my +1 to remove the special handling of "delete" default right.
>>>


-- 
Sergiu Dumitriu
http://purl.org/net/sergiu/


More information about the devs mailing list