29 Sep
2016
29 Sep
'16
5:27 p.m.
Yes, this is the expected behaviour.
The rationale behind this is that users with "Programming" right can add
scripting content to pages
that does not need to pass the usual permission checks; this is sometimes necessary for
some "advanced" UI operations.
As a consequence every user with "Programming" rights can give itself also
Admin rights by writing scripted content that just does so.
This makes it pointless not to give then admin rights as well.
More in this on the permission reference page:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Permission+types/
Cheers
Clemens
On 09/28/2016 05:01 PM, simmsj wrote:
I was testing with a few user accounts and found that
users in a specific
group had admin rights even though they weren't in the XWikiAdminGroup and
the group they were in did not have Admin rights checked. After some trial
and error I found that removing the Program right removed Admin rights as
well.
Is this the expected behavior? I just upgraded to 8.2.1, but this might have
been the case before and I just hadn't noticed.
Thanks,
Jared
--
View this message in context:
http://xwiki.475771.n2.nabble.com/Program-Admin-Expected-Behavior-tp7601420…
Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users