18 Nov
2014
18 Nov
'14
4:14 p.m.
Hi Victor,
See my reply to your initial mail.
Generally speaking, you should probably store your data in wiki pages or
spaces and apply the proper rights. If view rights are also restricted to
users and using the web API to retrieve the data becomes, use a service
instead that will retrieve the data and perform additional rights checks if
necessary.
Thanks,
Eduard
On Tue, Nov 18, 2014 at 2:40 PM, Thomas Mortagne <thomas.mortagne(a)xwiki.com>
wrote:
On Tue, Nov 18, 2014 at 11:34 AM, Victor Rachieru
<victor.rachieru(a)xwiki.com> wrote:
Hei devs,
I'm looking for the best way to associate certain information for a user
that others (except the user himself and maybe admins) should not be able
to modify.
This is a general issue which applies in numerous cases but at the
moment I
need it to store the ratings for extensions in
the repository app (more
here: http://xwiki.markmail.org/message/k7gwpnrx77vxtfrk)
A way that I see this working would be to use a document as an editor to
which we feed the actual page where the information is stored.
The edition of the information contained within the documents would only
be
possible through the editor page giving more
control over who and what
can
edit. The visualization of the content pages
would be available to
anyone.
Ideally for this we would need to kind of have a special "inline
right" that allow to edit the document only trough inline editor.
There are a few other suggestions described in this design proposal:
http://design.xwiki.org/xwiki/bin/view/Proposal/Extensionrepositoryratings#…
What do you guys think is the best approach for storing data so that it's
safe from alteration by unwanted users?
This issue is a blocker for the implementation of the ratings feature so
please state your opinion so that we can make a decision.
Thanks,
Victor
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
--
Thomas Mortagne
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs