12 Feb
2016
12 Feb
'16
9:02 a.m.
On Thu, Feb 11, 2016 at 10:35 PM, vincent(a)massol.net <vincent(a)massol.net> wrote:
Hi,
On 10 Feb 2016 at 15:06:58, TRAN Antoine
(antoine-b.tran@thalesgroup.com(mailto:antoine-b.tran@thalesgroup.com)) wrote:
XAR import. Maybe Antoine is talking about office import ?
Hi,
My project want me to restrict import/export function to authorized users (for instance a
group). Is that possible? Indeed, it seems that having "view" rights
automatically enable import/export rights. Thank you.
—
- Import always require Admin permissions - XAR Export always requires Admin permissions
- HTML Export is available to anyone who can view (the logic is that since they can view
pages, why wouldn’t they be able to get them?)
- PDF export is also available to anyone who can view (same logic I guess)
To override this behavior the easiest is to forbid the /export/ action in the web server
(apache, nginx, etc). There are others ways but they’re more complex.
Thanks
-Vincent
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne