Hi, We need to modify http://platform.xwiki.org/xwiki/bin/view/Features/RightsManagement to explain this. I think Jerome is working on this. Basically when you allow a right to a group it means the other groups won't have it allowed unless you explicitely allow them. I don't full remember the rationale behind this, maybe Sergiu or Ludovic can help here. That said I do agree it's not self explicit and I'd be for changing that although that would be a big change (we need to discuss it for when we're going to rewrite the authorization module). Thanks -Vincent On Dec 6, 2008, at 3:10 AM, Nick Watts wrote:
I'm using XWiki Enterprise version 1.6.1.13621. I was following the instructions in the FAQ to forbid registration ( http://www.xwiki.org/xwiki/bin/view/FAQ/HowCanIForbidRegistration, which seems to be out-of-date for my version BTW) and noticed some strange behavior. I don't want anyone to self-register so I denied access in the "Register" column of the "Rights" admin page for all groups. I logged out and noticed the register link was still on the page. I tried registering a fake user and it worked. After playing around for a while I figured out that I had to actually grant Register access for the XWikiAdminGroup group to get the Register link to disappear. If I deny Register access or just leave it blank for the XWikiAdminGroup group the Register link is present and works. This is backwards to me. Without looking at the code it seems like a logical error somewhere. Could someone tell me whether I'm understanding this process correctly or not?
-- Nick Watts blog: thewonggei.wordpress.com