1 Jul
2011
1 Jul
'11
9:15 a.m.
On 07/01/2011 08:33 AM, Paul Harris wrote:
> Shouldn't it keep both the data and the
metadata private if the user doesn't
> have view access rights?
> thanks,
> Paul
> _______________________________________________
> users mailing list
> users(a)xwiki.org
> http://lists.xwiki.org/mailman/listinfo/users
Hi all,
I notice that if I allow any logged on user to view
the XWiki space, then
they can look at this page:
/xwiki/AllDocs?view=index
AllDocs page is in the Main space so its view access is not influenced
by the rights you set on the XWiki space (i.e. that target the XWiki space).
Which shows all the page titles in all of the spaces,
even if the user
doesn't have access to those pages!
First of all, for me the first column called "Page" displays page names
not page titles. Then, for pages I don't have view right there is no
link and a star is displayed which is explained after the live-table:
(*) Some documents require special rights to be viewed.
Hope this helps,
Marius