Yishay Mor wrote:
In several sections of our XWiki site, we want to use
the following
workflow:1. any registered user can create a new object.
2. upon creation, the user will be taken to a form for editing the new
object.
3. the user who created the object will be able to assign co-editors.
The problem is, I don't want to give all users edit rights to the whole
section. I have a form for creating a new object, but if I don't give edit
rights on the whole space to all registered users, the form results in a
"you are not allowed to edit this page". If I do, then users will be able to
edit others' pages, or mess up the space structure. I'm not worried
about malice, I just want to protect users from their own mistakes, and
avoid spam.
Ideally, I would like to either:
* have a separate"create" column in the rights editor, which will allow
users to create a new object and give them edit rights over it.
* have a script attached to the current create form which would do the same.
Currently that doesn't work unless the user invoking the form already has
edit rights.
Hint: saveWithProgrammingRights
--
Sergiu Dumitriu
http://purl.org/net/sergiu/