Re: [xwiki-users] security concern: XWikiGuest rolling back

This is really puzzling. I don't understand how the guest user has obtained edit rights on some objects and not on others. Just to be on the safe side, I ran the script below: #set ($hql = ", BaseObject as obj where obj.name=doc.fullName and obj.className='Patterns.PatternClass' and obj.name <>'Patterns.PatternClassTemplate'") #set ($items= $xwiki.searchDocuments($hql)) #foreach ($item in $items) * $item #set ($itemDoc = $xwiki.getDocument($item)) #set ($rights = $itemDoc.getObject("XWiki.XWikiRights", true)) #set ($result = $rights.set("levels", "edit")) #set ($result = $rights.set("users", "XWiki.XWikiGuest")) #set ($result = $rights.set("allow", 0)) #end ___________________________ Yishay Mor, Researcher, London Knowledge Lab http://www.lkl.ac.uk/people/mor.html http://www.google.com/calendar/embed?src=yishaym%40gmail.com +44-20-78378888 x5737