On Thu, Dec 9, 2010 at 23:46, Paul Harris <[email protected]> wrote:
On 9 December 2010 22:30, Sergiu Dumitriu <[email protected]> wrote:
On 12/09/2010 02:28 AM, Paul Harris wrote:
On 9 December 2010 09:21, Paul Harris<[email protected]> wrote:
Hi again,
I wanted to protect my "Website Admin" from any non-admins, So I edited the Rights to that space, and clicked the 'View' button on 'XWikiAllGroup' until it was a red cross. Then I checked in the other webbrowser (logged in as a regular user), and sure enough, I couldn't view the page.
However, I then went to this address: http://domain.com/xwiki/edit/Website+Admin/ and the regular user was able to edit the page! which also includes a 'Preview' button, which shows them a View!
not good.
After I removed ALL the rights to the AllUsers group, I noticed that unregistered users are able to view the space.
What happens when I add more groups to the wiki, will those users be able to view the space? Or will they be covered by AllUsers?
I don't find this intuitive... I haven't thought this through, but I would've preferred to be able to switch OFF all rights, and then switch on the rights to the users/groups I want to edit.
Switching on some rights automatically has the effect of switching off the default rights, which means if a right is not explicitly granted, it is considered forbidden. Not very intuitive, I know.
That doesn't seem to be the case, as I said, I turned off some of the rights (View), and yet another right (Edit) for the same bunch of users was still allowed. Switching off some of the rights did *not* have the effect of switching off the default rights.
Or do I have to switch on some rights in order to get the behaviour you are talking about?
Rights are not connected to each other, that means that "no view rights" doesn't imply "no other rights", even if logically "edit" is stronger than "view". Also allow edit, admin, comment for the users that should have these rights. Note that the rights implementation is going to change soon, see http://svn.xwiki.org/svnroot/xwiki/contrib/sandbox/xwiki-security-rightservi... -- http://purl.org/net/sergiu