20 Feb
2009
20 Feb
'09
10:47 a.m.
Henning Sprang wrote:
On Fri, Feb 20, 2009 at 9:46 AM, Vincent Massol
<vincent(a)massol.net> wrote:
The rights system is not modular yet, so you will have to change one
java class.
Look at
xwiki-core/src/main/java/com/xpn/xwiki/user/impl/xwiki/XWikiRightServiceImpl.java,
around line 106, there should be a line like:
actionMap.put("pdf", "view");
and around line 115:
actionMap.put("export", "view");
A quick solution is to replace "view" with "admin". A better solution
is
to replace "view" with "export", but then you will have to also
change
other java code and some skin files.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
One easy solution I can think of would be to
prevent access to them by
configuring your web server to deny some actions (*/export/.....).
O.K. we'll do that if we need it fast and the other way is taking too long.
Apart from this you would have to modify some
java code (the Action
classes code).
That's probably what we're going to do then. I have to look at the
code sooner or later anyway for the other export stuff.