[xwiki-users] security concern: XWikiGuest rolling back versions
This has happened a few times on http://patternlanguagenetwork.myxwiki.org/, and I can't explain it. I set the access rights to allow view by all, but edit is restricted. I'm seeing documents rolled back to older versions by XWikiGuest. Example: http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/Patterns/tabletopco... ___________________________ Yishay Mor, Researcher, London Knowledge Lab http://www.lkl.ac.uk/people/mor.html http://www.google.com/calendar/embed?src=yishaym%40gmail.com +44-20-78378888 x5737
Yishay Mor wrote:
This has happened a few times on http://patternlanguagenetwork.myxwiki.org/, and I can't explain it. I set the access rights to allow view by all, but edit is restricted. I'm seeing documents rolled back to older versions by XWikiGuest. Example: http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/Patterns/tabletopco...
On this document the guest has been granted edit rights. Look at the rights editing for it, and select Users, and you will see that Unregistered Users has set view, comment and edit. -- Sergiu Dumitriu http://purl.org/net/sergiu/
participants (2)
-
Sergiu Dumitriu -
Yishay Mor