Hei devs,
I'm looking for the best way to associate certain information for a user
that others (except the user himself and maybe admins) should not be able
to modify.
This is a general issue which applies in numerous cases but at the moment I
need it to store the ratings for extensions in the repository app (more
here:
http://xwiki.markmail.org/message/k7gwpnrx77vxtfrk)
A way that I see this working would be to use a document as an editor to
which we feed the actual page where the information is stored.
The edition of the information contained within the documents would only be
possible through the editor page giving more control over who and what can
edit. The visualization of the content pages would be available to anyone.
There are a few other suggestions described in this design proposal:
http://design.xwiki.org/xwiki/bin/view/Proposal/Extensionrepositoryratings#…
What do you guys think is the best approach for storing data so that it's
safe from alteration by unwanted users?
This issue is a blocker for the implementation of the ratings feature so
please state your opinion so that we can make a decision.
Thanks,
Victor