Branch: refs/heads/okf-required-rights Home: https://github.com/xwiki/xwiki-dev-llm Commit: 26fac6ea133bb8bf0c58491e77c1c99b590e67d4 https://github.com/xwiki/xwiki-dev-llm/commit/26fac6ea133bb8bf0c58491e77c1c9... Author: Vincent Massol <[email protected]> Date: 2026-09-07 (Mon, 07 Sep 2026) Changed paths: M xwiki/instructions/xwiki-org.md A xwiki/okf/architecture/required-rights.md M xwiki/okf/index.md Log Message: ----------- [Misc] Record what the required-rights analyzer does not tell you The OKF had no coverage of required rights at all, and following the analyzer's recommendation is what shipped a broken application in xwiki-contrib/application-releasenotes#51. * Add okf/architecture/required-rights.md with the three things neither the UI nor the xwiki.org pages state: an object type with no RequiredRightAnalyzer falls through to the default one and its registration cost is never reported (XWiki.WikiMacroClass has none, while DefaultWikiMacroFactory.isAllowed demands Right.ADMIN at EntityType.WIKI of the macro document's author for Current Wiki visibility, so declaring script leaves the macro unregistered); a page carrying enforceRequiredRights must declare xwikidoc version 1.6, which nothing verifies; and DocumentRequiredRightsManager reads the enforced rights back in a PageTest given three components on @ComponentList. * Also record that enforcement is forced onto documents an enforcing page's script saves, that author="target" escapes it on an include, and that such a page can only be validated by a fresh install. * List the topic in okf/index.md and name it in the always-on map. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications