29 May
2009
29 May
'09
6:58 p.m.
-----Original Message-----
From: devs-bounces(a)xwiki.org [mailto:devs-bounces@xwiki.org] On Behalf
Of Sergiu Dumitriu
Sent: Thursday, May 28, 2009 7:00 PM
To: XWiki Developers
Subject: Re: [xwiki-devs] Permissions on actions
glenn_engel(a)agilent.com wrote:
As Guillaume said, the class that assigns edit rights to actions is in
http://svn.xwiki.org/svnroot/xwiki/platform/core/trunk/xwiki-
core/src/main/java/com/xpn/xwiki/user/impl/xwiki/XWikiRightServiceImpl.
java
(look at the actionMap). Unfortunately, this map is not
modular/extensible, so you will have to change this class and use a
custom build of it in your wiki. This will change in the future, but it
will take a while until then.
Thanks. The code defaults to the 'edit' right which will work for my application.
It looks like an easy fix to allow other actions to be included would be to do
1) treat an action like view.doSomething the same as view. That is, strip everything
after a . or - and then do the lookup. This way plugins could ride on top of existing
action rights by just having a prefix on their actions.
or
2) Add a method to add elements to the action map.
--
Glenn
Hi,
I'm wondering how xwiki applies permissions to various actions. For
example,
in looking at the ViewAction and DeleteAction classes I don't
see anything that would be applying permissions but clearly some part
of the system knows that a /view/ action is different than a /delete/
which is different from a /viewrev/.
I created my own action and it 'appears' to be applying the edit
permissions. How is this done? What if it was a view type of action?
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs