Hi, On 10 Feb 2016 at 15:06:58, TRAN Antoine ([email protected](mailto:[email protected])) wrote:
Hi,
My project want me to restrict import/export function to authorized users (for instance a group). Is that possible? Indeed, it seems that having "view" rights automatically enable import/export rights. Thank you. —
- Import always require Admin permissions - XAR Export always requires Admin permissions - HTML Export is available to anyone who can view (the logic is that since they can view pages, why wouldn’t they be able to get them?) - PDF export is also available to anyone who can view (same logic I guess) To override this behavior the easiest is to forbid the /export/ action in the web server (apache, nginx, etc). There are others ways but they’re more complex. Thanks -Vincent