[xwiki-users] AD, mydashboard and default permissions
Hello, I'm having some trouble understating how the default permissions work and could use some help/guidance. I've got workspaces running, configured to authenticated off AD and have user groups populating via the group mapping stuff. It works really slick. My problem stems from when a new user logs into xwiki the My Dashboard pages just says. "You cannot create a personnal space since your not registered on this wiki!" Also when a user tries to edit their profile image I get this error. Error You are not allowed to view this document or perform this action. The user is a member of the XWikiAllGroup and those pages work for my superadmin account. I guess my question is what types of permissions are required for that functionality to work and how do I go about changing them so they will work. I've fumbled around in the space rights and global rights changing all sorts of stuff but not really making any headway in getting those sections working. Thanks Justin St. Onge Academic Server Administrator/Lab Coordinator SUNY College at Oneonta <http://www.oneonta.edu/> - Academic Computer Services <http://helpdesk.oneonta.edu/> [email protected] "Look, defenseless babies!" Fletch
Hi Justin, On Thu, May 22, 2008 at 11:19 PM, <[email protected]> wrote:
Hello,
I'm having some trouble understating how the default permissions work and could use some help/guidance. I've got workspaces running, configured to authenticated off AD and have user groups populating via the group mapping stuff. It works really slick.
My problem stems from when a new user logs into xwiki the My Dashboard pages just says.
"You cannot create a personnal space since your not registered on this wiki!"
Have you checked that all your users are created properly ? Does this behaviour happen when you add a new user from XWiki Workspaces Global Admin interface ?
Also when a user tries to edit their profile image I get this error.
Error You are not allowed to view this document or perform this action.
The user is a member of the XWikiAllGroup and those pages work for my superadmin account.
I guess my question is what types of permissions are required for that functionality to work and how do I go about changing them so they will work. I've fumbled around in the space rights and global rights changing all sorts of stuff but not really making any headway in getting those sections working.
At first glance it looks like this is due to a couple glitches on the part of XWiki Workspaces handling the users created from AD mapping in a slightly different way from users created from the web interface... I haven't had the time to thoroughfully test AD integration on XWS, so thanks for poiting this out :-) It would be great if you could add a jira issue on http://jira.xwiki.org so that someone from the dev team can look into it and provide a patch if needed. Thanks for trying out XWiki Workspaces, we'd be glad to receive your feedback about it, what ou like and what you dislike about it, why you choosed it and so on... The solution is still quite new so user feedback is key at this point :-) Thanks, Guillaume
Hello Justin, Is there any chance you are in a virtual context (multiple wikis) ? While working the personal space creation feature, I decided to allow those only to local users (users registered on the workspace wiki). Now I don't recall what was the exact reasons I had in mind to prevent this, so I suppose it's arguable. It would be better to set this as a global preferences, like "Are users from other wikis allowed to create their personnal spaces ?". Now this may not explain your issue. Can you tell what is the form of your users usernames ? can those usernames include colomn ":" ? In XWSCode.CreateMySpace, there is this test : #set($user=$context.user) #if($user.indexOf(":")>0) #error("$msg.get('xws.createmyspace.notregistered')") #else ## ... here is the personal space creation button... #end ; I did so since users from other wikis are identified under the form database:XWiki.Username. I haven't though it might interfere with AD back then. If this is the case we'll have to correct this in next version (and for now, you can remove the test in the XWSCode.CreateMySpace document if you want). As for the rights of users to edit their profile, can you look into the XWikiRights objects in a user document ? Here what normally you should have for such an document : * XWiki.XWikiRights[0] -> Allow XWikiAdminGroup to edit * XWiki.XWikiRights[1] -> Allow the considered user to edit Does this match you user entries ? Regards, Jérôme.
Hello,
I'm having some trouble understating how the default permissions work and could use some help/guidance. I've got workspaces running, configured to authenticated off AD and have user groups populating via the group mapping stuff. It works really slick.
My problem stems from when a new user logs into xwiki the My Dashboard pages just says.
"You cannot create a personnal space since your not registered on this wiki!"
Also when a user tries to edit their profile image I get this error.
Error You are not allowed to view this document or perform this action.
The user is a member of the XWikiAllGroup and those pages work for my superadmin account.
I guess my question is what types of permissions are required for that functionality to work and how do I go about changing them so they will work. I've fumbled around in the space rights and global rights changing all sorts of stuff but not really making any headway in getting those sections working.
Thanks
Justin St. Onge
Academic Server Administrator/Lab Coordinator
SUNY College at Oneonta <http://www.oneonta.edu/> - Academic Computer Services <http://helpdesk.oneonta.edu/>
"Look, defenseless babies!"
Fletch
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
participants (3)
-
Guillaume Lerouge -
Jerome Velociter -
stongejc@oneonta.edu