17 Jan
2017
17 Jan
'17
5:02 p.m.
Hi Thomas,
On 17 Jan 2017, at 16:54, Thomas Mortagne
<thomas.mortagne(a)xwiki.com> wrote:
Hi devs,
I'm thinking since a long time that maybe we should automatically make
superadmin the author of the pages when installing a XAR as long as
the current user (and current author) have programming right (i.e. has
the same rights than superadmin when the extension is installed). I
don't really see anything against it these days and it's easy to do so
why not.
Basically the goal is to reduce the possibility to break extensions
when you play with existing users/groups/rights. Common user case
being to get rid of some old adminsys leaving the company.
WDYT ?
Why not. However I haven’t thought enough about it but right now the downside I see is the
loss of accountability/tracability. It’s interesting to know what user has installed a
given page. Using superadmin would loose this info.
BTW and related to this, I’d prefer to have a System user instead of using superadmin. The
rationale is that super admin is user and you can log with it whereas System wouldn’t be a
user that you can log with. It would represent a change made by the system. This could be
another discussion but I thought I would mention it here to be complete.
Thanks
-Vincent
Note: to be complete we could imagine the same kind of
thing for admin
user but that require the introduction of a virtual admin right user
like superadmin is a vitual programming right user. But let's not
discuss too many thing at once.
--
Thomas Mortagne