Hi,

I think the matter lies in the fact that a blog page in XWiki is basically a wiki page with a blog object embedded in it. this mean that if your user has been able to create the page he will be able to edit it too. AFAIK you cannot allow the creation of a page without allowing people to modify it later. The edit rights are applied for page creation as well as page modification. I'd say that the rationale behind that is that there is no point in preventing someone who created a page to come back to it.

However there may be a partial solution. You can put the blog "add entry" button in different spaces an allow some users to modify a space while another group of users can modify another space. So basically you have group A that can create and edit blog pages in space A and group B that can edit and create in space B. Group A has reading rights in B and Group has reading rights in A.

The easiest way to proceed is to cut and paste the following code on every space, with a modification:

<form action="" id="newdoc">
<input type="hidden" name="parent" value=" Main.WebHome" />
<input type="hidden" name="template" value="XWiki.ArticleClassTemplate" />
<input type="hidden" name="sheet" value="1" />
<input type="hidden" name="webname" value="Main"/>  => THIS MUST BE SET TO SPACE A OR SPACE B ETC...
<input type="hidden" name="name" value=""/>
<input type="text" name="title" value="page name" size="18"/>
<input type="button" value="Ajouter" onclick='if (updateName(this.form.title, this.form.name)) { action="../../inline/" + this.form.webname.value + "/" + this.form.name.value; this.form.submit(); }' />
</form>

This will create a "new article" button. Clicking on it will allow the user to create a new blog article hosted in the specified space.

Now you can add the following code on a page in space C. This code will gather all the posts on your wiki and display them on the C page:

#set($nbstart = $request.nbstart)
#set($category = "")
#set($nbitems = "5")
#includeMacros("Blog.Macros")

Now everybody can see them, but Group A cannot edit blog pages hosted in space B and inversely. If you push the logic as far as assigning 1 space / user / rights / blog then all blog posts wil be collected on C but only users who started a post will be able to modify it.

Notwithstanding any comment rights...

This is second-hand work though, there may be unexpected problems with this approach. Please tell me if something goes wrong.

Guillaume

On 11/05/07, thegios <gandalf@freeweb.be> wrote:

I would like to set up the access rights for my wiki in the following way

ADMIN: can do everything
ALL GROUPS: can only view pages, add comments and create a new blog entry

The problem is hat i dunno how to setup permissions for the blogs: if I set
no access for the spage "BLOG" than a standard user cannot create a new blog
entry. The only way to do this is to set for ALL GROUPD edit access to the
space "BLOG", but then they will be able to edit parts of the blog i don't
want them to touch.

Thanks
--
View this message in context: http://www.nabble.com/Access-to-create-a-blog-entry-tf3727469.html#a10432051
Sent from the XWiki- Users mailing list archive at Nabble.com.




--
You receive this message as a subscriber of the xwiki-users@objectweb.org mailing list.
To unsubscribe: mailto:xwiki-users-unsubscribe@objectweb.org
For general help: mailto:sympa@objectweb.org ?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws




--
http://wikibc.blogspot.com/