On 06/14/2013 06:05 AM, Mohit Gupta wrote:
I have integrated xwiki with active directory it works
great. I want user
should be able to edit their profile only not anybody else.
Now if i give Admin rights on Xwiki space to XwikiAllGroup, active
directory user can edit any user profile and lot of other stuff under xwiki
space which i do not want. If i don't give Admin rights on Xwiki space to
XwikiAllGroup, in that case user can not edit his profile also.
You should NOT give admin rights to everybody.
So whats the right way to configure so that user can
edit his profile only?
Normally all user profiles should already have proper rights set up so
that only the user and admins can edit their profile. So maybe you
changed something else that broke this feature.
Can you check that each user profile document has two XWikiRights
objects, one allowing edit for XWikiAdminGroup, one allowing edit for
that user?
--
Sergiu Dumitriu
http://purl.org/net/sergiu