On 07/01/2011 08:33 AM, Paul Harris wrote:
Hi all,
I notice that if I allow any logged on user to view the XWiki space, then they can look at this page:
/xwiki/AllDocs?view=index
AllDocs page is in the Main space so its view access is not influenced by the rights you set on the XWiki space (i.e. that target the XWiki space).
Which shows all the page titles in all of the spaces, even if the user doesn't have access to those pages!
First of all, for me the first column called "Page" displays page names not page titles. Then, for pages I don't have view right there is no link and a star is displayed which is explained after the live-table: (*) Some documents require special rights to be viewed. Hope this helps, Marius
Shouldn't it keep both the data and the metadata private if the user doesn't have view access rights?
thanks, Paul _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users