16 Oct
2009
16 Oct
'09
11:53 a.m.
Hi Devs,
right now an user can have edit rights on a page even though he does not
have the view right on that page.
This sounds weird to me since that user can still access the page's content
by going to the right URL.
Thus I think it would be better to have the view right inherited from the
edit right (if an user can edit a page he should also be able to view it).
Is there any drawback to this?
Here's the matching JIRA issue: http://jira.xwiki.org/jira/browse/XWIKI-4491
Thanks for your feedback,
Guillaume
--
Guillaume Lerouge
Product Manager - XWiki SAS
Skype: wikibc
Twitter: glerouge
http://guillaumelerouge.com/
16 Oct
16 Oct
12:01 p.m.
New subject: [xwiki-devs] [Proposal] Automatically inherit the "View" right from the "Edit" right
HI,
On Fri, Oct 16, 2009 at 3:23 PM, Guillaume Lerouge <guillaume(a)xwiki.com>wrote;wrote:
Hi Devs,
right now an user can have edit rights on a page even though he does not
have the view right on that page.
This sounds weird to me since that user can still access the page's content
by going to the right URL.
Thus I think it would be better to have the view right inherited from the
edit right (if an user can edit a page he should also be able to view it).
May be there should be a change of wording, i feel it should be: "edit"
right inheriting from "view" right.
Thanks.
- Asiri
Is there any drawback to this?
Here's the matching JIRA issue:
http://jira.xwiki.org/jira/browse/XWIKI-4491
Thanks for your feedback,
Guillaume
--
Guillaume Lerouge
Product Manager - XWiki SAS
Skype: wikibc
Twitter: glerouge
http://guillaumelerouge.com/
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
12:03 p.m.
New subject: [xwiki-devs] [Proposal] Automatically inherit the "View" right from the "Edit" right
Hi,
On Fri, Oct 16, 2009 at 3:31 PM, Asiri Rathnayake <
asiri.rathnayake(a)gmail.com> wrote:
-
Asiri
HI,
On Fri, Oct 16, 2009 at 3:23 PM, Guillaume Lerouge <guillaume(a)xwiki.com>wrote;wrote:
Ok, your JIRA issue has it right:
Here's the matching JIRA issue: http://jira.xwiki.org/jira/browse/XWIKI-4491
Hi Devs,
right now an user can have edit rights on a page even though he does not
have the view right on that page.
This sounds weird to me since that user can still access the page's
content
by going to the right URL.
Thus I think it would be better to have the view right inherited from the
edit right (if an user can edit a page he should also be able to view it).
May be there should be a change of wording, i feel it should be: "edit"
right inheriting from "view" right.
3:37 p.m.
On 10/16/2009 11:53 AM, Guillaume Lerouge wrote:
Hi Devs,
right now an user can have edit rights on a page even though he does not
have the view right on that page.
This sounds weird to me since that user can still access the page's content
by going to the right URL.
Thus I think it would be better to have the view right inherited from the
edit right (if an user can edit a page he should also be able to view it).
Is there any drawback to this?
The rights code is already complex as it is, this would only add more
if-else branches in a spaghetti code. Plus, it adds another piece of
"access rights magic". Although it is logic that users should not be
allowed to edit what they can't see, I think that letting the admins set
the rights to accomplish this is the right way.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
5502
days inactive
5502
days old
3 comments
3 participants
participants (3)
-
Asiri Rathnayake -
Guillaume Lerouge -
Sergiu Dumitriu