On Thu, Feb 11, 2016 at 10:35 PM, [email protected] <[email protected]> wrote:
Hi,
On 10 Feb 2016 at 15:06:58, TRAN Antoine ([email protected](mailto:[email protected])) wrote:
Hi,
My project want me to restrict import/export function to authorized users (for instance a group). Is that possible? Indeed, it seems that having "view" rights automatically enable import/export rights. Thank you. —
- Import always require Admin permissions
XAR import. Maybe Antoine is talking about office import ?
- XAR Export always requires Admin permissions - HTML Export is available to anyone who can view (the logic is that since they can view pages, why wouldn’t they be able to get them?) - PDF export is also available to anyone who can view (same logic I guess)
To override this behavior the easiest is to forbid the /export/ action in the web server (apache, nginx, etc). There are others ways but they’re more complex.
Thanks -Vincent
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne