[xwiki-users] Allow Active Directory user to edit his profile only?
I have integrated xwiki with active directory it works great. I want user should be able to edit their profile only not anybody else. Now if i give Admin rights on Xwiki space to XwikiAllGroup, active directory user can edit any user profile and lot of other stuff under xwiki space which i do not want. If i don't give Admin rights on Xwiki space to XwikiAllGroup, in that case user can not edit his profile also. So whats the right way to configure so that user can edit his profile only?
A user can only edit his own profile by default...at least, that's how it works with us. (We also are using Active Directory for our users) -- View this message in context: http://xwiki.475771.n2.nabble.com/Allow-Active-Directory-user-to-edit-his-pr... Sent from the XWiki- Users mailing list archive at Nabble.com.
On Fri, Jun 14, 2013 at 1:05 PM, Mohit Gupta <[email protected]> wrote:
I have integrated xwiki with active directory it works great. I want user should be able to edit their profile only not anybody else.
Now if i give Admin rights on Xwiki space to XwikiAllGroup, active directory user can edit any user profile and lot of other stuff under xwiki space which i do not want. If i don't give Admin rights on Xwiki space to XwikiAllGroup, in that case user can not edit his profile also.
So whats the right way to configure so that user can edit his profile only?
Why not set rights as page (user profile) level rather than at space (XWiki) level? That's the case by default afaik. Hope this helps, Marius
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
What are the rights given to XwikiAllGroup for spaces like xwiki and Main On Fri, Jun 14, 2013 at 5:09 PM, Hamster <[email protected]> wrote:
A user can only edit his own profile by default...at least, that's how it works with us.
(We also are using Active Directory for our users)
-- View this message in context: http://xwiki.475771.n2.nabble.com/Allow-Active-Directory-user-to-edit-his-pr... Sent from the XWiki- Users mailing list archive at Nabble.com. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
On 06/14/2013 06:05 AM, Mohit Gupta wrote:
I have integrated xwiki with active directory it works great. I want user should be able to edit their profile only not anybody else.
Now if i give Admin rights on Xwiki space to XwikiAllGroup, active directory user can edit any user profile and lot of other stuff under xwiki space which i do not want. If i don't give Admin rights on Xwiki space to XwikiAllGroup, in that case user can not edit his profile also.
You should NOT give admin rights to everybody.
So whats the right way to configure so that user can edit his profile only?
Normally all user profiles should already have proper rights set up so that only the user and admins can edit their profile. So maybe you changed something else that broke this feature. Can you check that each user profile document has two XWikiRights objects, one allowing edit for XWikiAdminGroup, one allowing edit for that user? -- Sergiu Dumitriu http://purl.org/net/sergiu
Thanks Sergiu. Looks like some of the rights got messed up.Cleared them and working fine now. On Fri, Jun 14, 2013 at 8:41 PM, Sergiu Dumitriu <[email protected]> wrote:
On 06/14/2013 06:05 AM, Mohit Gupta wrote:
I have integrated xwiki with active directory it works great. I want user should be able to edit their profile only not anybody else.
Now if i give Admin rights on Xwiki space to XwikiAllGroup, active directory user can edit any user profile and lot of other stuff under xwiki space which i do not want. If i don't give Admin rights on Xwiki space to XwikiAllGroup, in that case user can not edit his profile also.
You should NOT give admin rights to everybody.
So whats the right way to configure so that user can edit his profile only?
Normally all user profiles should already have proper rights set up so that only the user and admins can edit their profile. So maybe you changed something else that broke this feature.
Can you check that each user profile document has two XWikiRights objects, one allowing edit for XWikiAdminGroup, one allowing edit for that user? -- Sergiu Dumitriu http://purl.org/net/sergiu _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
participants (4)
-
Hamster -
Marius Dumitru Florea -
Mohit Gupta -
Sergiu Dumitriu