[xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2).

[Sergiu Dumitriu]

Are users authenticated using the normal XWiki authentication, or LDAP?

If it's normal login, I'll send you a simple velocity macro that checks if a
user belongs to a group.

On 1/11/07, Esbach, Brandon <Esbachb at tycoelectronics.com> wrote:
>
>  Sergiu,
>
> On 10B2 I don't seem to get a group listing for this API command,
> regardless of who saves the page.. showstopper for my installation planned
> this weekend.  Is there an alteration to how the API is called in the new
> version?
>
>  ------------------------------
> *From:* Esbach, Brandon [mailto:Esbachb at tycoelectronics.com]
> *Sent:* 11 January 2007 13:40
> *To:* xwiki-users at objectweb.org
> *Subject:* RE: [xwiki-users] Virtual wiki's and groupmembership
> (implemented on 0.9.840 due for upgrade to 1.0b2).
>
>  I'd have to agree with you on all those points.. no standard user should
> ever be able to get access to the database directly.
>
> A simple call like $xwiki.isMemberOf("XWiki.ProjectManagersGroup") would
> be extremely useful, and require less frontend manipulation (a simple
> boolean check instead of a loop with string comparisons).
> Surely that kind of call could be done without need for PR rights though?
>
>  ------------------------------
> *From:* Sergiu Dumitriu [mailto:sergiu.dumitriu at gmail.com]
> *Sent:* 11 January 2007 13:26
> *To:* xwiki-users at objectweb.org
> *Subject:* Re: [xwiki-users] Virtual wiki's and groupmembership
> (implemented on 0.9.840 due for upgrade to 1.0b2).
>
> Maybe there should be a setting in xwiki.cfg to customize whether or not
> programming rights can be granted on a virtual wiki. These rights were
> designed only for global administrators because they are quite dangerous. A
> user having PR can change any document or alter the database directly, and
> almost anything an administrator should be allowed to do can be achieved
> without using PR.
>
> And maybe we should have an API for listing the groups a user is in.
>
> On 1/11/07, Esbach, Brandon < Esbachb at tycoelectronics.com> wrote:
> >
> >  Thanks Sergui, works perfectly when I make that change.
> > Odd thing, those classes were created quite some time before the virtual
> > wiki setup was implemented - would have thought they should not be affected
> > by that.
> >
> > Almost a bug though:  as an administrator, if I trust a user
> > sufficiently that I grant them admin rights to the virtual wiki, they really
> > should be able to do anything on that wiki, regardless of whether they exist
> > on the main wiki or not; might just be me though thinks that way!
> >
> >
> >  ------------------------------
> > *From:* Sergiu Dumitriu [mailto:sergiu.dumitriu at gmail.com]
> > *Sent:* 10 January 2007 20:10
> > *To:* xwiki-users at objectweb.org
> > *Subject:* Re: [xwiki-users] Virtual wiki's and groupmembership
> > (implemented on 0.9.840 due for upgrade to 1.0b2).
> >
> >  AFAIK:
> > The API you are using requires programming rights, and these rights are
> > only possible for users in the main wiki. Try this:
> > - Create an account on the main wiki, with an username that does not
> > exist in the other virtual wikis
> > - Grant Programming rights to that user
> > - Login with that user
> > - Edit and save the pages that list the users
> >
> > Now it should work.
> >
> > Sergiu Dumitriu
> >
> > On 1/10/07, Esbach, Brandon <Esbachb at tycoelectronics.com> wrote:
> > >
> > >  Hi all,
> > >
> > > Me again, this time with another groups/permission issue.
> > >
> > > On my wiki's I use
> > > "$context.xWiki.groupService.listGroupsForUser($context.user,
> > > $context.context))" to get a list of groups a user is a member of.  This has
> > > worked very well up until implementing a virtual wiki setup…since
> > > implementing a virtual wiki setup, I've found the listGroupsForUser only
> > > works for the main wiki (the one pointing to xwiki database), and not for
> > > the "other" wiki's hanging on the same server.
> > >
> > > The users are definitely regarded as being in the group as a
> > > permission check works for the group (eg if only group ABC has right EDIT
> > > for a space, the user is granted the right only if they are in the group).
> > >
> > > But, the listGroupsForUser always returns no groups, even for
> > > XWiki.Admin - even though every user has at least one group.
> > >
> > > *Brandon Esbach*
> > > *Software Engineer*
> > > *M/A-Com Eurotec Operations*
> > > *LoughMahon Technology Park,*
> > > *Skehard Road,*
> > > *Blackrock,*
> > > *Cork, Ireland*
> > > *Tel  +353 21 4808305*
> > >
> > >
> > > --
> > > You receive this message as a subscriber of the
> > > xwiki-users at objectweb.org mailing list.
> > > To unsubscribe: mailto: xwiki-users-unsubscribe at objectweb.org
> > > For general help: mailto: sympa at objectweb.org?subject=help
> > > ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
> > >
> > >
> > >
> > >
> >
> >
> > --
> > You receive this message as a subscriber of the
> > xwiki-users at objectweb.org mailing list.
> > To unsubscribe: mailto: xwiki-users-unsubscribe at objectweb.org
> > For general help: mailto: sympa at objectweb.org?subject=help
> > ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
> >
> >
> >
>
>
> --
> You receive this message as a subscriber of the xwiki-users at objectweb.orgmailing list.
> To unsubscribe: mailto:xwiki-users-unsubscribe at objectweb.org
> For general help: mailto:sympa at objectweb.org?subject=help
> ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.xwiki.org/pipermail/users/attachments/20070111/b4d94d40/attachment-0001.html