Hi Caleb, Just to replay what I have said on IRC yesterday, if we had created a "create" right since the beginning, this one would not have been implied by edit, but exactly the reverse. Edit would have been implied by create, since there is no use case were you want to be able to create but not save the document. On the other hand, implying create when you have edit does not really allow to do anything useful with the create right itself. Having create without edit making no sense. So, for me, this way to do is a no go unless you bring more evidence that this is required. IMO, the create action may be check against edit right at the space level (I know the current implementation is badly design for that, but this is another question). Now, since we are at a major release, we may decide to introduce "create" as a new major right. This bring a new interesting feature, where user will be able to edit but not create. It will require an UI update (that is also to be planed when the new right module is used to support dynamic rigths), a check against create when editing a new document (using edit action), and a migration procedure for existing wiki to convert edit into create. +1 for a new create right implying edit (but I would advice waiting for the new security module), and currently -1 for the opposite. Regards, On Fri, Mar 15, 2013 at 1:44 AM, Caleb James DeLisle < [email protected]> wrote:

Hi,

I would like to fix http://jira.xwiki.org/browse/XWIKI-8892 by making a distinct "create" right. Currently "create" is an alias for "edit" which fails if CreateAction is called on an existing document. CreateAction and the accompanying UI expect to be called on an existing document and for the name of the new document to be passed in a form parameter.

I'm proposing adding a create right which aliases to "edit" on the space and wiki level but is not checked on the per-document level.

WDYT?

Caleb

_______________________________________________ devs mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/devs

-- Denis Gervalle SOFTEC sa - CEO eGuilde sarl - CTO