[xwiki-users] Changing default right policy: how to restrict a User's pages to its own access by default
I haven't been able to find a satisfying answer nor have I been able to find it out by myself. So I have to rely on you guys! I just would like to have that policy by default: The view and edit rights assigned to any resource created by a User are restricted to that User only by default. Unless it does create it in a public space. In other word, I'd like to be able to provide a private space to my users. cheers -- View this message in context: http://www.nabble.com/Changing-default-right-policy%3A-how-to-restrict-a-Use... Sent from the XWiki- Users mailing list archive at Nabble.com.
Hi, On Sep 25, 2007, at 8:35 AM, nodje nodje wrote:
I haven't been able to find a satisfying answer nor have I been able to find it out by myself. So I have to rely on you guys!
I just would like to have that policy by default: The view and edit rights assigned to any resource created by a User are restricted to that User only by default. Unless it does create it in a public space. In other word, I'd like to be able to provide a private space to my users.
The easiest is to create a space per user and to set the permissions for that space so that only the user has the rights to that space. See the user guide on xwiki.org, there's a page about Rights Management explaining how to do this. Thanks -Vincent
There's no out-of-the-box mechanism for this. You can write a java plugin that uses the notification mechanism, listens for all document save action, and if a document is new, then it adds the XWikiRights object that allows only that user to view and edit the document. Sergiu On 9/25/07, nodje nodje <[email protected]> wrote:
I haven't been able to find a satisfying answer nor have I been able to find it out by myself. So I have to rely on you guys!
I just would like to have that policy by default: The view and edit rights assigned to any resource created by a User are restricted to that User only by default. Unless it does create it in a public space. In other word, I'd like to be able to provide a private space to my users.
cheers
-- View this message in context: http://www.nabble.com/Changing-default-right-policy%3A-how-to-restrict-a-Use... Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Sergiu, Why not do what I suggested instead in my answer, i.e. have user spaces? -Vincent On Sep 26, 2007, at 8:29 AM, Sergiu Dumitriu wrote:
There's no out-of-the-box mechanism for this.
You can write a java plugin that uses the notification mechanism, listens for all document save action, and if a document is new, then it adds the XWikiRights object that allows only that user to view and edit the document.
Sergiu
On 9/25/07, nodje nodje <[email protected]> wrote:
I haven't been able to find a satisfying answer nor have I been able to find it out by myself. So I have to rely on you guys!
I just would like to have that policy by default: The view and edit rights assigned to any resource created by a User are restricted to that User only by default. Unless it does create it in a public space. In other word, I'd like to be able to provide a private space to my users.
cheers
-- View this message in context: http://www.nabble.com/Changing- default-right-policy%3A-how-to-restrict-a-User%27s-pages-to-its- own-access-by-default-tf4513129.html#a12872456 Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- http://purl.org/net/sergiu _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
I proposed an alternative if the documents MUST be in the same space. Of course, your idea is much simpler and much nicer, since it doesn't mix all the documents in one big bowl, speaking about information design. On 9/26/07, Vincent Massol <[email protected]> wrote:
Sergiu,
Why not do what I suggested instead in my answer, i.e. have user spaces?
-Vincent
On Sep 26, 2007, at 8:29 AM, Sergiu Dumitriu wrote:
There's no out-of-the-box mechanism for this.
You can write a java plugin that uses the notification mechanism, listens for all document save action, and if a document is new, then it adds the XWikiRights object that allows only that user to view and edit the document.
Sergiu
On 9/25/07, nodje nodje <[email protected]> wrote:
I haven't been able to find a satisfying answer nor have I been able to find it out by myself. So I have to rely on you guys!
I just would like to have that policy by default: The view and edit rights assigned to any resource created by a User are restricted to that User only by default. Unless it does create it in a public space. In other word, I'd like to be able to provide a private space to my users.
cheers
-- View this message in context: http://www.nabble.com/Changing- default-right-policy%3A-how-to-restrict-a-User%27s-pages-to-its- own-access-by-default-tf4513129.html#a12872456 Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Sergiu -- http://purl.org/net/sergiu
http://jira.xwiki.org/jira/browse/XWIKI-1769 would be a better fix, but someone should implement it. On 9/26/07, Sergiu Dumitriu <[email protected]> wrote:
I proposed an alternative if the documents MUST be in the same space. Of course, your idea is much simpler and much nicer, since it doesn't mix all the documents in one big bowl, speaking about information design.
On 9/26/07, Vincent Massol <[email protected]> wrote:
Sergiu,
Why not do what I suggested instead in my answer, i.e. have user spaces?
-Vincent
On Sep 26, 2007, at 8:29 AM, Sergiu Dumitriu wrote:
There's no out-of-the-box mechanism for this.
You can write a java plugin that uses the notification mechanism, listens for all document save action, and if a document is new, then it adds the XWikiRights object that allows only that user to view and edit the document.
Sergiu
On 9/25/07, nodje nodje <[email protected]> wrote:
I haven't been able to find a satisfying answer nor have I been able to find it out by myself. So I have to rely on you guys!
I just would like to have that policy by default: The view and edit rights assigned to any resource created by a User are restricted to that User only by default. Unless it does create it in a public space. In other word, I'd like to be able to provide a private space to my users.
cheers
-- View this message in context: http://www.nabble.com/Changing- default-right-policy%3A-how-to-restrict-a-User%27s-pages-to-its- own-access-by-default-tf4513129.html#a12872456 Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Sergiu -- http://purl.org/net/sergiu
guys, thanks for the support. Sorry for the delay, somehow I was not receiving this thread updates. I've been struggling to implement my requirement with the given rights management system since my post. I gave up, that's why I came back on the forum. I ended up removing the default access for every user on the XWiki, adding it manually to each every public (existing Blog, Photo, Main, etc..) space, and then manually setting the access right for the 'private' spaces. I stopped when I realized sub pages would not inherit parents right! I think both your answers are helpful and valid in the context. The context being that there is no Creator right in the model right now. In that respect XWIKI-1769 would be more than welcome. I think I'd even give it a major priority level. If Xwiki has to address enterprise needs, this is a serious issue. I'm new to XWiki and have been mostly working on Twiki before. If I may ask, why bother creating a rights management system when file system 'a la Unix' would have done the job fine?? The 'hook' right manager advised by Sergiu should work for now. As for assigning a Space to each user, this is probably the best way to keep the wiki clean. But 'sub-space' would be needed in my case: I wanted to share a project's page and subpages from my 'private' space PRO with a co-worker. This is not doable today. I'd have to move the project from my private PRO space to some other space, say PUBPRO. But even then, I'd like to keep the project work secret and keep it with view and edit rights only for me and my co-worker. So creating a space especially for this would do the job (with pages inheriting rights from the space, correct?). But since space is the highest item in the hierarchy, this could end up in a quite messy organization. cheers nodje wrote:
I haven't been able to find a satisfying answer nor have I been able to find it out by myself. So I have to rely on you guys!
I just would like to have that policy by default: The view and edit rights assigned to any resource created by a User are restricted to that User only by default. Unless it does create it in a public space. In other word, I'd like to be able to provide a private space to my users.
cheers
-- View this message in context: http://www.nabble.com/Changing-default-right-policy%3A-how-to-restrict-a-Use... Sent from the XWiki- Users mailing list archive at Nabble.com.
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- View this message in context: http://www.nabble.com/Changing-default-right-policy%3A-how-to-restrict-a-Use... Sent from the XWiki- Users mailing list archive at Nabble.com.
guys, thanks for the support. Sorry for the delay, somehow I was not receiving this thread updates. I've been struggling to implement my requirement with the given rights management system since my post. I gave up, that's why I came back on the forum. I ended up removing the default access for every user on the XWiki, adding it manually to each every public (existing Blog, Photo, Main, etc..) space, and then manually setting the access right for the 'private' spaces. I stopped when I realized sub pages would not inherit parents right! I think both your answers are helpful and valid in the context. The context being that there is no Creator right in the model right now. In that respect XWIKI-1769 would be more than welcome. I think I'd even give it a major priority level. If Xwiki has to address enterprise needs, this is a serious issue. I'm new to XWiki and have been mostly working on Twiki before. If I may ask, why bother creating a rights management system when file system 'a la Unix' would have done the job fine?? The 'hook' right manager advised by Sergiu should work for now. As for assigning a Space to each user, this is probably the best way to keep the wiki clean. But 'sub-space' would be needed in my case: I wanted to share a project's page and subpages from my 'private' space PRO with a co-worker. This is not doable today. I'd have to move the project from my private PRO space to some other space, say PUBPRO. But even then, I'd like to keep the project work secret and keep it with view and edit rights only for me and my co-worker. So creating a space especially for this would do the job (with pages inheriting rights from the space, correct?). But since space is the highest item in the hierarchy, this could end up in a quite messy organization. cheers vmassol wrote:
Hi,
On Sep 25, 2007, at 8:35 AM, nodje nodje wrote:
I haven't been able to find a satisfying answer nor have I been able to find it out by myself. So I have to rely on you guys!
I just would like to have that policy by default: The view and edit rights assigned to any resource created by a User are restricted to that User only by default. Unless it does create it in a public space. In other word, I'd like to be able to provide a private space to my users.
The easiest is to create a space per user and to set the permissions for that space so that only the user has the rights to that space.
See the user guide on xwiki.org, there's a page about Rights Management explaining how to do this.
Thanks -Vincent
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- View this message in context: http://www.nabble.com/Changing-default-right-policy%3A-how-to-restrict-a-Use... Sent from the XWiki- Users mailing list archive at Nabble.com.
participants (4)
-
nodje -
nodje nodje
-
Sergiu Dumitriu -
Vincent Massol