July 2011 - xwiki-users@xwiki.org

[xwiki-users] Import confusion
by Paul Harris 01 Jul '11

01 Jul '11

Hi again, I wanted to delete all the packages I had uploaded for Import. If I go through the XWikiPreferences --> Import, I can't see any packages... the link is: http://HOST/xwiki/import/XWiki/XWikiPreferences?editor=globaladmin&section=… However, if I go to this page (which I can't remember how I got there): http://host/xwiki/import/XWiki/Import?editor=globaladmin&section=Import I can see a dozen packages that I uploaded. Whats the difference between these two imports, and how do I get to the second one without knowing the link beforehand? (I think I found it via the Document Index and scanning hundreds of docs in the XWiki space) cheers Paul

3 11

[xwiki-users] rename a User Group
by Paul Harris 01 Jul '11

01 Jul '11

Hello again, There seems to be no way of renaming a User Group... is this by design? thanks! Paul

2 1

[xwiki-users] fix for CheckRights
by Paul Harris 01 Jul '11

01 Jul '11

Hi again, I really like the CheckRights tool in the Admin Tool http://extensions.xwiki.org/xwiki/bin/view/Extension/AdminTools However, it doesn't have the ability to check the rights of the Unregistered User. Can someone please help me to tweak the code so that it can check the rights? thanks Paul

2 2

[xwiki-users] Backlinks panel broken?
by Paul Harris 01 Jul '11

01 Jul '11

Hi again, The backlinks panel for my Main.WebHome shows this list: XWiki Syntaxes | XWiki Syntaxes | XWiki Syntaxes | XWiki Syntaxes | XWiki Syntaxes | $escapetool.xml($rdoc.plainTitle) | $escapetool.xml($rdoc.plainTitle) If the user has View Rights on the SandBox, then the "escapetool" lines become SandBox. Point 1) Surely if the user doesn't have view rights to a page, it should not be in the backlist at all? Point 2) Can the BackLinks ignore all the XWiki and other system spaces? Point 3) Can Backlinks just list each page once rather than multiple times? thanks Paul

2 4

[xwiki-users] Crazy-bad security
by Paul Harris 01 Jul '11

01 Jul '11

Hi guys, I installed the "Admin Tools" plugin http://extensions.xwiki.org/xwiki/bin/view/Extension/AdminTools And found that half the stuff didn't work anyway. Regardless, carrying on, I am hoping the User Rights tool will be helpful, however it can't seem to check the most important user: the Unregistered User And what is worse, I discovered by accident that the Unregistered User can access the space! For example, an unregistered user can access the /xwiki/Admin/RunQuery page, which could be used to run queries directly on the database, for example select * from xwikipreferences Does this give anyone else a heart attack too?? WHY is there no default "cannot view unless admin says so" mode? This is a problem with all of my spaces. When I create a space, I want to then have to go and ALLOW people to access it. Not open by default, that is much harder to configure. Can someone please look at rights management, it seems to be insecure by default, and makes me scared. thanks. Paul

4 23

[xwiki-users] FoXWiki still expected, but outdated
by Paul Harris 01 Jul '11

01 Jul '11

Hi again, When you click the little pencil next to image-attachments in firefox, it says 'you need an extension to do this'. However, that extension hasn't worked with firefox since 3.0 Isn't it time to either retire the requirement on that extension, or update the extension? cheers Paul

1 0

[xwiki-users] Bug in Filesystem Attachment Porter
by Paul Harris 01 Jul '11

01 Jul '11

Hi again, I tried to transfer all my attachments to the filesystem with the script: http://extensions.xwiki.org/xwiki/bin/view/Extension/Filesystem+Attachment+… which IS a core extension (at least developed by the dev team). I'm using jetty, and it fails with this error: /var/cache/jetty/tmp/work/storage/xwiki/XWiki/XWikiSyntax/~this/attachments/img.png/img.png~tmp (Too many open files) I found that jetty had many many open files - it had created and left open the handle on hundreds of files in /var/cache/jetty/data/upload__* Was this tested against a full sized wiki? My wiki isn't very big at all yet, maybe a few dozen pages at the most. Does this happen on a tomcat server? Maybe noone checked it on jetty? Seems like leaving the handle open isn't a scalable solution ... I'm looking at the code for the script, I'd like to fix it somehow... Can someone please give me a tip? cheers Paul

1 0