[xwiki-users] chicken & egg / catch 21 problem
In several sections of our XWiki site, we want to use the following workflow:1. any registered user can create a new object. 2. upon creation, the user will be taken to a form for editing the new object. 3. the user who created the object will be able to assign co-editors. The problem is, I don't want to give all users edit rights to the whole section. I have a form for creating a new object, but if I don't give edit rights on the whole space to all registered users, the form results in a "you are not allowed to edit this page". If I do, then users will be able to edit others' pages, or mess up the space structure. I'm not worried about malice, I just want to protect users from their own mistakes, and avoid spam. Ideally, I would like to either: * have a separate"create" column in the rights editor, which will allow users to create a new object and give them edit rights over it. * have a script attached to the current create form which would do the same. Currently that doesn't work unless the user invoking the form already has edit rights. See example here: http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/Cases/ ___________________________ Yishay Mor, Researcher, London Knowledge Lab http://www.lkl.ac.uk/people/mor.html http://www.google.com/calendar/embed?src=yishaym%40gmail.com +44-20-78378888 x5737
Yishay Mor wrote:
In several sections of our XWiki site, we want to use the following workflow:1. any registered user can create a new object. 2. upon creation, the user will be taken to a form for editing the new object. 3. the user who created the object will be able to assign co-editors.
The problem is, I don't want to give all users edit rights to the whole section. I have a form for creating a new object, but if I don't give edit rights on the whole space to all registered users, the form results in a "you are not allowed to edit this page". If I do, then users will be able to edit others' pages, or mess up the space structure. I'm not worried about malice, I just want to protect users from their own mistakes, and avoid spam.
Ideally, I would like to either: * have a separate"create" column in the rights editor, which will allow users to create a new object and give them edit rights over it. * have a script attached to the current create form which would do the same. Currently that doesn't work unless the user invoking the form already has edit rights.
Hint: saveWithProgrammingRights -- Sergiu Dumitriu http://purl.org/net/sergiu/
On Mon, Dec 29, 2008 at 6:59 PM, Sergiu Dumitriu <[email protected]> wrote:
Yishay Mor wrote:
In several sections of our XWiki site, we want to use the following workflow:1. any registered user can create a new object. 2. upon creation, the user will be taken to a form for editing the new object. 3. the user who created the object will be able to assign co-editors.
The problem is, I don't want to give all users edit rights to the whole section. I have a form for creating a new object, but if I don't give edit rights on the whole space to all registered users, the form results in a "you are not allowed to edit this page". If I do, then users will be able to edit others' pages, or mess up the space structure. I'm not worried about malice, I just want to protect users from their own mistakes, and avoid spam.
Ideally, I would like to either: * have a separate"create" column in the rights editor, which will allow users to create a new object and give them edit rights over it. * have a script attached to the current create form which would do the same. Currently that doesn't work unless the user invoking the form already has edit rights.
Hint: saveWithProgrammingRights
You'll probably need to help him sicne I'm not sure Yishay is an Admin on the master wiki on myxwiki.org, thus he probably cannto save the page with programming rights, can he Sergiu ? Guillaume
-- Sergiu Dumitriu http://purl.org/net/sergiu/ _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Guillaume Lerouge Product Manager - XWiki Skype ID : wikibc http://blog.xwiki.com/
participants (3)
-
Guillaume Lerouge -
Sergiu Dumitriu -
Yishay Mor