[xwiki-devs] [VOTE] Allow "delete" right by default
dgl at softec.lu
Fri Feb 24 09:53:54 UTC 2012
On Thu, Feb 23, 2012 at 18:24, Vincent Massol <vincent at massol.net> wrote:
> I'd also prefer to force using the superadmin user in an empty wiki and
> don't give any rights by default to the guest user.
Great to hear that, since this is exactly what the new implementation I
propose do !
By the way, you miss the fact that this is not the guest user, but a null
user when the wiki is empty, something even worse IMO.
The new implementation does not give any right to anyone called null.
> What Thomas raised was only for consistency indeed.
> I personally needed to write a test in an empty wiki where I needed to
> delete a page. Here's what I tried:
> * Deleting the page with guest lead to the Login page
> * Registering a user and trying to delete the page with it leads to a
> permission error ("you don't have the permission blah blah")
> What I'm doing now is log with the superadmin user which I guess is the
> best in the end.
> The alternative is to register a user and explicitly give it the delete
> right or make it admin.
> Back to the VOTE, I agree that it's not good to implement and I'm also -1
> now since it would cause changes to existing wikis as Denis and Thomas
> On Feb 23, 2012, at 6:13 PM, Andreas Jonsson wrote:
> > -1
> > As I see it, it is the fact that admin right is allowed by default that
> > is an irregularity. Currently, the initial import relies on these
> > default admin rights, and it is expected that the imported contents
> > configure the admin right appropriately.
I fully agree with Andreas, this open the wiki to risks for just an initial
> > In a standard wiki-setting, I would expect that "delete", "admin", and
> > "programming" are denied to most users and it seems to me natural that
> > the default is "deny" for these. So if this is a matter of consistency,
> > I would rather see a new mechanism (e.g., a special "uninitialized"
> > state of the wiki) to make it possible to change the default to "deny"
> > also for admin rights.
> > Best Regards,
> > Andreas
> > 2012-02-23 16:02, Thomas Mortagne skrev:
> >> Right now on an empty wiki you have all the rights except "delete"
> >> (and register).
> >> So this means that you have "admin" right but you don't have "delete"
> >> This does not make much sense and I anyway I don't see why delete has
> >> this special rule.
> >> Any idea ?
> >> Here is my +1 to remove the special handling of "delete" default right.
> > _______________________________________________
> > devs mailing list
> > devs at xwiki.org
> > http://lists.xwiki.org/mailman/listinfo/devs
> devs mailing list
> devs at xwiki.org
SOFTEC sa - CEO
eGuilde sarl - CTO
More information about the devs