Hi, one downside I can see is that an user will no longer be able to delete their own profile. We would need to provide a solution for this before changing the default behavior. Guillaume On Mon, Oct 31, 2011 at 10:06 PM, Andreas Jonsson <[email protected]> wrote:
Hi,
I would like to close XWIKI-6987. The simplest fix is to stop considering delete rights at document level. There was only one response to this vote when Sergiu proposed it so if it is ok I would like to propose it again:
Should the rights service ignore delete rights set at document level?
Here is my +1.
Best regards,
/Andreas
2011-09-30 17:46, Sergiu Dumitriu skrev:
On 09/30/2011 11:18 AM, Guillaume Lerouge wrote:
Hi,
I agree with this, especially given the use case described by Dimitry a couple weeks ago where an user with edit rights on a page were able to give himself the right to delete it. In addition to this, it's quite rare to have to assign this right at page level. "Delete" is a clean-up right that usually makes sense at the space level (at least), less so at the page level.
Side question: does this have an impact on the right to rename a page? Is the "rename" right mapped to the edit or the delete action?
Renaming implies deleting the old document, so yes, currently one can't rename a document if they can't delete it as well. Still, this is just a technical link, given by the fact that we don't have a real rename method, it's just copy+delete.
So I'm +1 to remove the "delete" right at document level.
Guillaume
On Fri, Sep 30, 2011 at 4:32 PM, Sergiu Dumitriu<[email protected]> wrote:
Rights have different scopes in XWiki. Administration rights can only be set on a space or wiki level, and any "admin" right set on a document alone will be silently ignored. Programming rights are only considered when set on the xwiki:XWiki.XWikiPreferences document, being ignored in any other virtual wiki and at the space or document level.
Delete rights are a bit special as well. By default, the creator of a document has delete rights on that document. Unlike the other rights which default to true when no right is set, this one defaults to false.
So, by default, when no "delete" rights are set on the document/space/wiki, only the creator of a document and administrators are allowed to delete it.
Should we allow setting the delete right at the document level?
Personally, I'd say no, since it's a rare requirement for a non-creator to be able to delete just one document. Space-level rights should be enough, IMO.
_______________________________________________ devs mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/devs