Hi Sergiu and Jean. Thank you for the reply. Indeed that is a non-intuitive fact that solved my question. I just need to allow IT dept and all the other groups will be denied. Is it writen somewhere in Xwiki's Wiki?If not, I will insert that info here: http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Access+Rights One last question: I'm developing an app that set rights automatically when creating(display=inline) or editing(display=edit) a page. e.g.: A userX submits a form that must be visible only to a specific department he chooses(IT e.g.). So I must get the deptartment property from object1. The problem is that object1 and even the page are not created yet, so .getObject won't work. So, how can I get the departament field before the user sents the request(Save the page)? Thank you. 2014-09-08 13:31 GMT-03:00 Sergiu Dumitriu <[email protected]>:
On 09/08/2014 12:15 PM, Leonardo Kodato wrote:
Hi Users.
Let's assume that I have two groups, XWikiAllGroup and IT Department, and I want to deny AllGroup's access to a specific page and allow the IT to view it.
The problem is that UserX is member of both of them. When I deny XWikiAllGroup's permission, UserX is unable to view the page, when it should be, as he is member of IT Department(allowed to view it).
How can I solve this without denying all other groups except XwikiAllGroup?
Deny rights are always stronger than allow rights.
One non-intuitive fact about rights is that setting a right for an entity implicitly denies that right for everybody else. So it's enough to allow grant rights to ITDepartment, everybody else will be denied that right. -- Sergiu Dumitriu http://purl.org/net/sergiu _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users