16 May
2008
16 May
'08
3:41 p.m.
Yishay Mor wrote:
I'm having some strange issues with access rights
on
http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/Cases/
Issue 1
======
I configured the space to permit view for unauthorized users. Yet when
loggen out I get:
Error number 4001 in 4: Error while parsing velocity page Cases.WebHome
Wrapped Exception: Failed to evaluate content with id
<http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/Cases/>Web
Home<http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/Cases/>
the root exception seems to be:
org.apache.velocity.exception.MethodInvocationException: Invocation of
method 'formatDate' in class com.xpn.xwiki.api.XWiki threw exception
java.lang.NullPointerException @ Cases.WebHome74,17?
When logged in, the page displays fine:
[snip]
The troublesome code is probably this:
<td> $xwiki.formatDate($caseDoc.getCreationDate(),"dd MMM yyyy")
</td>
<td> $xwiki.formatDate($caseDoc.getDate(),"dd MMM yyyy") </td>
Although you allowed view rights on the space, some of those documents
have stricter access rights ("Woodforthetrees" and "test"). It is
normal
that document access rights are stronger than space access rights, so
those documents won't be returned by the call to $xwiki.getDocument. You
should put an #if($xwiki.hasAccessLevel("view", $context.user, $case))
inside the foreach.
issue 2
=====
I use this code to create new pages in the space:
#if ($xwiki.hasAccessLevel("edit"))
</p><form action="" id="newdoc" method="post">
<div>
<input name="parent" value="XWiki.CaseClass"
type="hidden">
<input name="template" value="Cases.CaseClassTemplate"
type="hidden">
<input name="sheet" value="1" type="hidden">
<input name="webname" value="Cases" size="8"
type="hidden">
Name: <input name="name" value="Name of your case study"
type="text"
size="20">
<input value="Create" onclick='if (updateName(this.form.name))
{this.form.action="../../inline/" + this.form.webname.value + "/" +
this.form.name.value; this.form.submit(); }' type="button">
</div>
</form><p>
#else
sorry, you have to log in to enter a case study.
#end
It works fine, users can create new pages, but then they can't edit them!
In my desperation, I added this to the class sheet:
## set rights to allow creator and contributors to edit
## THIS DOESN'T WORK: CHICKEN & EGG PROBLEM => TURNED OFF SAVE
#macro(allowEdit $user)
#set ($rights = $doc.getObject("XWiki.XWikiRights", true))
#set ($result = $rights.set("levels", "edit"))
#set ($result = $rights.set("users", $user))
#set ($result = $rights.set("allow", 1))
## $doc.save()
#end
#allowEdit($doc.getCreator())
#foreach($contributor in $doc.getObject("Cases.CaseClass").contributors)
#allowEdit($contributor)
#end
but as you can see in the comment, it fails because if a user doesn't have
edit rights to begin with, save fails.
I see that you granted edit rights only to some groups. Can users in
those groups edit the documents they create? Only users not in one of
those groups cannot edit?
--
Sergiu Dumitriu
http://purl.org/net/sergiu/