[xwiki-users] AD, mydashboard and default permissions

[Jerome Velociter]

Hello Justin,

Is there any chance you are in a virtual context (multiple wikis) ? While
working the personal space creation feature, I decided to allow those only
to local users (users registered on the workspace wiki). Now I don't
recall what was the exact reasons I had in mind to prevent this, so I
suppose it's arguable. It would be better to set this as a global
preferences, like "Are users from other wikis allowed to create their
personnal spaces ?".

Now this may not explain your issue. Can you tell what is the form of your
users usernames ? can those usernames include colomn ":" ?

In XWSCode.CreateMySpace, there is this test :

#set($user=$context.user)
#if($user.indexOf(":")>0)
 #error("$msg.get('xws.createmyspace.notregistered')")
#else
 ## ... here is the personal space creation button...
#end

; I did so since users from other wikis are identified under the form
database:XWiki.Username. I haven't though it might interfere with AD back
then. If this is the case we'll have to correct this in next version (and
for now, you can remove the test in the XWSCode.CreateMySpace document if
you want).

As for the rights of users to edit their profile, can you look into the
XWikiRights objects in a user document ?

Here what normally you should have for such an document :

* XWiki.XWikiRights[0] -> Allow XWikiAdminGroup to edit
* XWiki.XWikiRights[1] -> Allow the considered user to edit

Does this match you user entries ?

Regards,
Jérôme.

> Hello,
>
>
>
> I'm having some trouble understating how the default permissions work
> and could use some help/guidance.   I've got workspaces running,
> configured to authenticated off AD and have user groups populating via
> the group mapping stuff.   It works really slick.
>
>
>
> My problem stems from when a new user logs into xwiki the My Dashboard
> pages just says.
>
>
>
> "You cannot create a personnal space since your not registered on this
> wiki!"
>
>
>
> Also when a user tries to edit their profile image I get this error.
>
>
>
> Error   You are not allowed to view this document or perform this
> action.
>
>
>
> The user is a member of the XWikiAllGroup and those pages work for my
> superadmin account.
>
>
>
> I guess my question is what types of permissions are required for that
> functionality to work and how do I go about changing them so they will
> work.   I've fumbled around in the space rights and global rights
> changing all sorts of stuff but not really making any headway in getting
> those sections working.
>
>
>
> Thanks
>
>
>
> Justin St. Onge
>
> Academic Server Administrator/Lab Coordinator
>
> SUNY College at Oneonta <http://www.oneonta.edu/>  - Academic Computer
> Services <http://helpdesk.oneonta.edu/>
>
> stongejc at oneonta.edu
>
>
>
> "Look, defenseless babies!"
>
> Fletch
>
>
>
> _______________________________________________
> users mailing list
> users at xwiki.org
> http://lists.xwiki.org/mailman/listinfo/users
>