16 Dec
2008
16 Dec
'08
11:18 p.m.
Rights are the same for both authentication types (classical and
ldap)- user has explicit edit right on their user page, other rights
are unset.
On Tue, Dec 16, 2008 at 8:20 PM, Thomas Mortagne
<thomas.mortagne(a)xwiki.com> wrote:
On Tue, Dec 16, 2008 at 12:41 AM, Peter Moran
<workingpeter(a)gmail.com> wrote:
Hi Thomas,
Thanks for the response. I am using XWiki Enterprise 1.6.1.13621. The
user has explicit edit right on its profile page, so the user appears
to have been created as expected (btw, I don't have an "Edit" ->
"Page access rights" menu option ?).
In the logs, the following entry appears when I am using the
XWikiLDAPAuthServiceImpl. This does _not_ appear when using the
"classic" authentication. Is this relevant? Any suggestions welcome.
10:22:31,930 [http://myserver/xwiki/bin/edit/XWiki/tester?xpage=changemyavatar]
[TP-Processor2] INFO xwiki.XWikiAuthServiceImpl - User
xwiki:XWiki.tester is authentified
10:22:31,931 [http://myserver/xwiki/bin/edit/XWiki/tester?xpage=changemyavatar]
[TP-Processor2] INFO xwiki.XWikiRightServiceImpl - Access has
been denied for (xwiki:XWiki.tester,XWiki.tester,delete): global level
(delete right must be explicit)
Hmm so the problem seems to be delete and not edit, which should not
be needed for profile edition. I will look into this. Is the user has
explicit delete right with classical authentication ?
Thanks,
Peter
On Tue, Dec 16, 2008 at 2:36 AM, Thomas Mortagne
<thomas.mortagne(a)xwiki.com> wrote:
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
On Mon, Dec 15, 2008 at 12:59 PM, Peter Moran
<peterm(a)diuscomputing.com.au> wrote:
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
I have a user as a member of the XWikiAllGroup.
When using the default
authentication class, she is able to change her profile photo. When I
use the XWikiLDAPAuthServiceImpl authclass to integrate with LDAP, she
gets a permission error "You are not allowed to view this document or
perform this action" when trying to change her photo. Are there any
differences in how this permission is handled across the auth service
implementations, or is it likely to be an LDAP group configuration
error?
XWikiLDAPAuthServiceImpl use the same methods as the "classical" XWiki
authentication to create a new user so you should have the same right
configuration on the user profile.
Then it add some more informations and synchronize groups membership
but this part does not touch the user profile.
Which version of XWiki are you using ?
Is the user has explicit edit right on its profile page (use the
"Edit" -> "Page access rights" UI) ?
Thanks,
Peter
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users