Hi devs, Right now if you enable xwiki.authentication.group.allgroupimplicit any user from any wiki will be part of any XWiki.XWikiAllgroup group from any wiki. I think this is wrong, for me xwiki.authentication.group.allgroupimplicit is supposed to have the same behavior as if it was disabled except that it allows to avoid loading a potentially huge group just to check if the user is in it. So I propose to also compare the user and group wiki and not just check that the group has space "XWiki" and name "XWikiAllGroup". WDYT ? -- Thomas Mortagne