28 Mar
2013
28 Mar
'13
5:32 p.m.
On 03/27/2013 08:52 AM, Benjamin Kunz wrote:
Hello,
i would like to set up a private (corporate) XWiki installation.
I have a problem in the testing installation that i would have to
solve before i can go ahead.
When i set "prevent unregistered users from viewing pages, regardless
of the page or space rights", the ResetPassword page is affected by
this setting. This creates, as you can imagine, a quite paradoxical
situation.
What is the recommended way to set up a private wiki, or is this a bug?
Note that this happens in the latest 4.5 as well as 5.0 branches.
It is a know limitation. The problem is that when you prevent view
rights for all unauthenticated users, you're also forbidding access to
the password reset page, which is a document in the wiki like all the
others.
One workaround for the moment is to set rights differently: instead of
checking "prevent unregistered users from viewing pages", deny all the
rights to the unauthenticated user. This should by default forbid access
to most parts of the wiki, except where explicitly granted rights, such
as the password reset feature.
--
Sergiu Dumitriu
http://purl.org/net/sergiu