23 Feb
2010
23 Feb
'10
11:30 a.m.
On 02/23/2010 10:54 AM, Stefan Bachert wrote:
Hi,
found out what went me wrong.
I allowed viewing in the assigned user group, but I disabled viewing in the
WikiAllGroup.
It is surprising to me that the more general WikiAllGroup wins over the more
specific assigned user group.
Deny rights are always stronger than allow rights. There is no group
ordering, no notion of a "more specific" group.
However, when the more specific user group is no more
able to change the
value when defined at WikiAllGroup, the checkbox should either be invisible
or readonly to reflect the current state
No, that is not right, since there is no known relationship between two
groups. XWikiAllGroup could be much larger than the smaller group, thus
the allow right is not always ignored, it correctly applies for all the
users that are in XWikiAllGroup and not in your specific group.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/