28 May
2009
28 May
'09
10:04 p.m.
Hi,
I'm wondering how xwiki applies permissions to various actions. For example, in
looking at the ViewAction and DeleteAction classes I don't see anything that would be
applying permissions but clearly some part of the system knows that a /view/ action is
different than a /delete/ which is different from a /viewrev/.
I created my own action and it 'appears' to be applying the edit permissions.
How is this done? What if it was a view type of action?
Thanks,
Glenn
29 May
29 May
12:46 a.m.
Hi Glenn,
On Thu, May 28, 2009 at 10:04 PM, <glenn_engel(a)agilent.com> wrote:
Hi,
I'm wondering how xwiki applies permissions to various actions. For
example, in looking at the ViewAction and DeleteAction classes I don't see
anything that would be applying permissions but clearly some part of the
system knows that a /view/ action is different than a /delete/ which is
different from a /viewrev/.
I created my own action and it 'appears' to be applying the edit
permissions. How is this done? What if it was a view type of action?
Not sure whether this is gonna help you, but the java code that handles
rights is located in here:
http://svn.xwiki.org/svnroot/xwiki/platform/core/trunk/xwiki-core/src/main/…
Maybe it has some of the answers you're looking for.
Guillaume
Thanks,
Glenn
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
--
Guillaume Lerouge
Product Manager - XWiki
Skype ID : wikibc
http://guillaumelerouge.com/
4 a.m.
glenn_engel(a)agilent.com wrote:
Hi,
I'm wondering how xwiki applies permissions to various actions. For example, in
looking at the ViewAction and DeleteAction classes I don't see anything that would be
applying permissions but clearly some part of the system knows that a /view/ action is
different than a /delete/ which is different from a /viewrev/.
I created my own action and it 'appears' to be applying the edit permissions.
How is this done? What if it was a view type of action?
As Guillaume said, the class that assigns edit rights to actions is in
http://svn.xwiki.org/svnroot/xwiki/platform/core/trunk/xwiki-core/src/main/…
(look at the actionMap). Unfortunately, this map is not
modular/extensible, so you will have to change this class and use a
custom build of it in your wiki. This will change in the future, but it
will take a while until then.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
6:58 p.m.
-----Original Message-----
From: devs-bounces(a)xwiki.org [mailto:devs-bounces@xwiki.org] On Behalf
Of Sergiu Dumitriu
Sent: Thursday, May 28, 2009 7:00 PM
To: XWiki Developers
Subject: Re: [xwiki-devs] Permissions on actions
glenn_engel(a)agilent.com wrote:
As Guillaume said, the class that assigns edit rights to actions is in
http://svn.xwiki.org/svnroot/xwiki/platform/core/trunk/xwiki-
core/src/main/java/com/xpn/xwiki/user/impl/xwiki/XWikiRightServiceImpl.
java
(look at the actionMap). Unfortunately, this map is not
modular/extensible, so you will have to change this class and use a
custom build of it in your wiki. This will change in the future, but it
will take a while until then.
Thanks. The code defaults to the 'edit' right which will work for my application.
It looks like an easy fix to allow other actions to be included would be to do
1) treat an action like view.doSomething the same as view. That is, strip everything
after a . or - and then do the lookup. This way plugins could ride on top of existing
action rights by just having a prefix on their actions.
or
2) Add a method to add elements to the action map.
--
Glenn
Hi,
I'm wondering how xwiki applies permissions to various actions. For
example,
in looking at the ViewAction and DeleteAction classes I don't
see anything that would be applying permissions but clearly some part
of the system knows that a /view/ action is different than a /delete/
which is different from a /viewrev/.
I created my own action and it 'appears' to be applying the edit
permissions. How is this done? What if it was a view type of action?
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
5589
days inactive
5590
days old
3 comments
3 participants
participants (3)
-
glenn_engel＠agilent.com -
Guillaume Lerouge -
Sergiu Dumitriu