Henning Sprang wrote:
On Fri, Feb 20, 2009 at 9:46 AM, Vincent Massol <[email protected]> wrote:
One easy solution I can think of would be to prevent access to them by configuring your web server to deny some actions (*/export/.....).
O.K. we'll do that if we need it fast and the other way is taking too long.
Apart from this you would have to modify some java code (the Action classes code).
That's probably what we're going to do then. I have to look at the code sooner or later anyway for the other export stuff.
The rights system is not modular yet, so you will have to change one java class. Look at xwiki-core/src/main/java/com/xpn/xwiki/user/impl/xwiki/XWikiRightServiceImpl.java, around line 106, there should be a line like: actionMap.put("pdf", "view"); and around line 115: actionMap.put("export", "view"); A quick solution is to replace "view" with "admin". A better solution is to replace "view" with "export", but then you will have to also change other java code and some skin files. -- Sergiu Dumitriu http://purl.org/net/sergiu/