10 Jul
2013
10 Jul
'13
4:41 p.m.
Hi,
On Jul 10, 2013, at 4:26 PM, Petteri Lyytinen <petteri.lyytinen(a)hannas.ee> wrote:
Hey all,
I'm running my very first xwiki installation and came across a small issue I
can't seem to be able to resolve with my limited experience of the product:
I need to restrict (registered) users' permission to see the user directory
to a specific group only ie. nobody else will be able to see the list of
registered users.
What I tried first was to restrict users' access to the User Directory page
but that doesn't really help since it only restricts access to that page -
not to users' profiles. You can simply manually hack the desired username in
the URL and get to see that user's profile.
How should I proceed?
I guess the only solution is to give the view rights on user pages only to some
group/users.
This could be achieved with a script to change all existing users.
You'd also need to change the user registration code so that it adds a new rights to
user pages when they are created. Another option is to write an even listener and have it
check if the rights for the page is correct and if not, then programmatically set it.
I'm curious: what's your use case?
Note that in some future, we want to move all users to a specific space. When this is done
the solution will simply be to set a right at the space level.
Thanks
-Vincent
-Petteri