On 06/14/2013 06:05 AM, Mohit Gupta wrote:
I have integrated xwiki with active directory it works great. I want user should be able to edit their profile only not anybody else.
Now if i give Admin rights on Xwiki space to XwikiAllGroup, active directory user can edit any user profile and lot of other stuff under xwiki space which i do not want. If i don't give Admin rights on Xwiki space to XwikiAllGroup, in that case user can not edit his profile also.
You should NOT give admin rights to everybody.
So whats the right way to configure so that user can edit his profile only?
Normally all user profiles should already have proper rights set up so that only the user and admins can edit their profile. So maybe you changed something else that broke this feature. Can you check that each user profile document has two XWikiRights objects, one allowing edit for XWikiAdminGroup, one allowing edit for that user? -- Sergiu Dumitriu http://purl.org/net/sergiu