Hi Mohit As you cited from the doc with programming rights you are allowed to "execute arbitrary java", but not modify it during runtime. An example for the use of programming rights would be if you create a page where an XWikiGuest user can save something without having edit rights on the page by using $doc.saveWithProgrammingRights(). In this example the script calling this method would need to be saved from a user with programming rights. Generally spoken, without programming rights you are only allowed to use Api classes and the mayor part of their methods. With programming rights you are allowed to use all methods of Api classes or even to get "background classes" (e.g. XWikiDocument instead of only the api class Document). Hope this clarifies how it works. Edo On Wed, Feb 1, 2012 at 12:12 PM, mohit gupta <[email protected]> wrote:
Below is the statement given at http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Access+Rights A programmer is allowed to execute arbitrary java code in the wiki and can thus gain control of the system user which the wiki is running under.
Could you give me some example how xwiki admin can modify existing java class. when it will be compile and deployed? Assume i want to add a new method in XWikiAuthServiceImpl.java . How should i go with this provided i am having programming rights.Thanks. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users