Hi all,
I notice that if I allow any logged on user to view the XWiki space, then
they can look at this page:
/xwiki/AllDocs?view=index
Which shows all the page titles in all of the spaces, even if the user
doesn't have access to those pages!
Shouldn't it keep both the data and the metadata private if the user doesn't
have view access rights?
thanks,
Paul