6 Dec
2008
6 Dec
'08
9:47 a.m.
Hi,
We need to modify http://platform.xwiki.org/xwiki/bin/view/Features/RightsManagement
to explain this. I think Jerome is working on this.
Basically when you allow a right to a group it means the other groups
won't have it allowed unless you explicitely allow them.
I don't full remember the rationale behind this, maybe Sergiu or
Ludovic can help here. That said I do agree it's not self explicit and
I'd be for changing that although that would be a big change (we need
to discuss it for when we're going to rewrite the authorization module).
Thanks
-Vincent
On Dec 6, 2008, at 3:10 AM, Nick Watts wrote:
I'm using XWiki Enterprise version 1.6.1.13621. I
was following the
instructions in the FAQ to forbid registration (
http://www.xwiki.org/xwiki/bin/view/FAQ/HowCanIForbidRegistration,
which
seems to be out-of-date for my version BTW) and noticed some strange
behavior. I don't want anyone to self-register so I denied access
in the
"Register" column of the "Rights" admin page for all groups. I
logged out
and noticed the register link was still on the page. I tried
registering a
fake user and it worked. After playing around for a while I figured
out
that I had to actually grant Register access for the XWikiAdminGroup
group
to get the Register link to disappear. If I deny Register access or
just
leave it blank for the XWikiAdminGroup group the Register link is
present
and works. This is backwards to me. Without looking at the code it
seems
like a logical error somewhere. Could someone tell me whether I'm
understanding this process correctly or not?
--
Nick Watts
blog: thewonggei.wordpress.com