rssh(a)gradsoft.com.ua wrote:
hello,
I would like to write some scripts which do some more complex SQL
extraction
requests using for example $xwiki.search(sql)... no modif of the DB, just
extraction for presentation... I would prefer not to be forced to code a
new
Java module just for this...
But this function is protected by programming rights...
So I must give programming rights to allow people to view this page... I
find a bit disturbing because programming rights have a "sensitive"
meaning
in my head...
I really think, that concept of programming right in xwiki is fundamental
flaw: evaluation of program is not programming.
So, I just usually grant programming rights to everyone.
Imho, if we want to fix this, than 'check programming right' in plugins
must be applied not to user of page, but to page author, on which called
function is situated. (I plan switch to such semantics in next release of
xwikisql)
That is the case already ! The only thing you have to take care of is
that "regular users" (without programming rights) do not edit pages that
needs to be saved with this programming right. To do this, the best
practice is to write the code in a protected space (like XWiki/), where
such regular users cannot edit, and to include that code from the target
document (in space Main/ or any other space). This way, if somebody does
edit the target document, the code that needs programming rights will
continue to work for everybody.
Jerome.
What's your point of view about this?
What's the lightest, cleverest and
fairest way to allow this? Any advice? :)
regards
Pascal
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs