Re: [xwiki-devs] Two little questions regarding permissions & user profile

18 Aug 2008

...
  The user profile is actually in a wiki page,
XWiki.XWikiUserSheet . You
 just have to edit that file. The source is at
 .../trunks/applications/administration/src/main/resources/XWiki/XWikiUserSheet.xml

OK. And then I guess I have to build it with Maven and reimport it in my 
XWiki installation, right? I'm using Eclipse to debug it.

...
   2. How can I
set the permissions for that action. Currently it requires
 Admin rights to be executed.

 What exactly will happen when you click that button? What kind of code
 is executed (Java, velocity)? On the user profile page, you can hide the
 button like this: 
When I'm calling 
http://localhost:8181/xwiki/bin/attachopenid/XWiki/AttachOpenID I'm 
redirected to the login page. If I log in as Admin everything works fine, 
otherwise I get the error message "Error - You are not allowed to view this 
document or perform this action."
The code in my action is not called. I don't know why.. couldn't figure it 
out. It happens somewhere in prepareDocuments() in 
XWikiAction#execute(XWikiContext context) I guess.

...
  #if ($hasadmin || $context.user == $doc.fullName)
 ## display button
 #end

 but you still need to check rights in the action's code. 
OK. I just need to make sure that the user is logged in. So a 
context.getXWikiUser() check should be enough, right!? 

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Re: [xwiki-devs] Two little questions regarding permissions & user profile