On Thu, Feb 23, 2012 at 18:24, Vincent Massol <[email protected]> wrote:
I'd also prefer to force using the superadmin user in an empty wiki and don't give any rights by default to the guest user.
Great to hear that, since this is exactly what the new implementation I propose do ! By the way, you miss the fact that this is not the guest user, but a null user when the wiki is empty, something even worse IMO. The new implementation does not give any right to anyone called null.
What Thomas raised was only for consistency indeed.
I personally needed to write a test in an empty wiki where I needed to delete a page. Here's what I tried: * Deleting the page with guest lead to the Login page * Registering a user and trying to delete the page with it leads to a permission error ("you don't have the permission blah blah")
What I'm doing now is log with the superadmin user which I guess is the best in the end.
The alternative is to register a user and explicitly give it the delete right or make it admin.
Back to the VOTE, I agree that it's not good to implement and I'm also -1 now since it would cause changes to existing wikis as Denis and Thomas explained.
Thanks -Vincent
On Feb 23, 2012, at 6:13 PM, Andreas Jonsson wrote:
-1
As I see it, it is the fact that admin right is allowed by default that is an irregularity. Currently, the initial import relies on these default admin rights, and it is expected that the imported contents configure the admin right appropriately.
I fully agree with Andreas, this open the wiki to risks for just an initial special case.
In a standard wiki-setting, I would expect that "delete", "admin", and "programming" are denied to most users and it seems to me natural that the default is "deny" for these. So if this is a matter of consistency, I would rather see a new mechanism (e.g., a special "uninitialized" state of the wiki) to make it possible to change the default to "deny" also for admin rights.
Best Regards,
Andreas
2012-02-23 16:02, Thomas Mortagne skrev:
Right now on an empty wiki you have all the rights except "delete" (and register).
So this means that you have "admin" right but you don't have "delete"
rights...
This does not make much sense and I anyway I don't see why delete has this special rule.
Any idea ?
Here is my +1 to remove the special handling of "delete" default right.
_______________________________________________ devs mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/devs
_______________________________________________ devs mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/devs
-- Denis Gervalle SOFTEC sa - CEO eGuilde sarl - CTO