20 Dec
2013
20 Dec
'13
5:51 p.m.
Hi,
On 20 Dec 2013 at 17:41:45, Matthias Albert
(matthias.albert@gmx.de(mailto://matthias.albert@gmx.de)) wrote:
We are using XWiki 5.2.1. One problem is, that every
unregistered user
can view the profile pages of all registered useres.
I tried the following: In the XWiki space, I managed to prevent
unregistered users to view any page of the XWiki space. This removed the
mentioned problem.
But then two other problems occured: unregistered users cannot see the
logo in the top-left corner, and they cannot see the tag-cloud macro
contents, which is signalled by an red-coloured error message.
Are there any solve theses problems?
Not easily.
Each page can have its own right so you could protect each user profile page. But I agree
it’s a bit of a pain.
You could also script it in order to do that at once. The algorithm would be:
- find all documents having a XWikiUsers objects attached to it
- verify the rights for the page and if the page isn’t protected, set the rights on it
In the future, our goal is to have one space dedicated to the user pages so it would be
extra easy to just protect that space.
Thanks
-Vincent