23 Dec
2007
23 Dec
'07
10:29 p.m.
Hi
I am new to xwiki. I follow the document and found out there is no link like
'Administration' on top right corner.
My basic question is how can I login as admin and change setting such as password and
valid a newly register user?
the version I use is 1.2 rc1.
Thank you very much.
__________________________________________________________
Sent from Yahoo! Mail - a smarter inbox http://uk.mail.yahoo.com
23 Dec
23 Dec
11:03 p.m.
Hi Neo,
You need to log in as usr: Admin pwd: admin and go to Administration ->
Users and add your own newly created user to the Admin group. Also, don't
forget to change the default password for the initial default Admin account.
Best regards
Robert
-----Opprinnelig melding-----
Fra: users-bounces(a)xwiki.org [mailto:users-bounces@xwiki.org] På vegne av
Neo Anderson
Sendt: 23. desember 2007 22:30
Til: users(a)xwiki.org
Emne: [xwiki-users] basic questions.
Hi
I am new to xwiki. I follow the document and found out there is no link like
'Administration' on top right corner.
My basic question is how can I login as admin and change setting such as
password and valid a newly register user?
the version I use is 1.2 rc1.
Thank you very much.
__________________________________________________________
Sent from Yahoo! Mail - a smarter inbox http://uk.mail.yahoo.com
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
11:06 p.m.
New subject: [xwiki-users] RSS feed = Security problem?
It seems that the RSS feed publishes whatever is changed, even from Spaces
which are non-public. This means that anyone subscribing to RSS feeds will
get document titles of new/changed pages, even if they are not among the
users who have the right to view the pages.
Is this a "feature" in XWiki, i.e. that all changes are published
indiscriminately if RSS is available?
If so, is there a way to disable RSS and/or to decide which page changes
should be published?
Best regards,
Robert
24 Dec
24 Dec
1:41 p.m.
New subject: [xwiki-users] RSS feed = Security problem?
Hi Robert, as everything else in XWiki RSS feeds are generated through
scripts. The easier way to stop them is to delete their pages (remove
?xpage=rdf at the end of the feed url to access the wiki page
underneath). Then you can either delete the page or try to play with
it in wiki edition mode to add velocity hasAdmin checks for instance.
My knowledge of XWiki scripting alas isnt good enough to provide you
with the precise modification to make there. Hope this helps,
Guillaume
On 23/12/2007, Robert Hercz <robert.hercz(a)teletopia.com> wrote:
It seems that the RSS feed publishes whatever is
changed, even from Spaces
which are non-public. This means that anyone subscribing to RSS feeds will
get document titles of new/changed pages, even if they are not among the
users who have the right to view the pages.
Is this a "feature" in XWiki, i.e. that all changes are published
indiscriminately if RSS is available?
If so, is there a way to disable RSS and/or to decide which page changes
should be published?
Best regards,
Robert
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
http://wikibc.blogspot.com/
26 Dec
26 Dec
noon
New subject: [xwiki-users] RSS feed = Security problem?
Hi Robert, if you take a look at the rss feed url without the ?xpage=rdf
in editing mode, as suggested by Guillame, you should see the page
XWiki.WebRssCode is include, taking a look at it will show you that
access rights are taken into account:
#if($xwiki.hasAccessLevel("view",
"${context.database}:${currentdoc.fullName}"))
the problem AFAIK is the call to the caching service
$context.setCacheDuration(1800) at the beginning of the page, commenting
it (i.e. ##$context.setCacheDuration(1800) ) should solve your problem.
On Mon, 2007-12-24 at 12:41 +0000, guillaume(a)xwiki.com wrote:
Hi Robert, as everything else in XWiki RSS feeds are
generated through
scripts. The easier way to stop them is to delete their pages (remove
?xpage=rdf at the end of the feed url to access the wiki page
underneath). Then you can either delete the page or try to play with
it in wiki edition mode to add velocity hasAdmin checks for instance.
My knowledge of XWiki scripting alas isnt good enough to provide you
with the precise modification to make there. Hope this helps,
Guillaume
On 23/12/2007, Robert Hercz <robert.hercz(a)teletopia.com> wrote:
--
Marco
=====
"We know nothing
— that is the first point.
Therefore we should be very modest
— that is the second.
That we should not claim to know when we do not know
— that is the third."
Karl R. Popper
It seems that the RSS feed publishes whatever is
changed, even from Spaces
which are non-public. This means that anyone subscribing to RSS feeds will
get document titles of new/changed pages, even if they are not among the
users who have the right to view the pages.
Is this a "feature" in XWiki, i.e. that all changes are published
indiscriminately if RSS is available?
If so, is there a way to disable RSS and/or to decide which page changes
should be published?
Best regards,
Robert
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
6109
days inactive
6112
days old
4 comments
4 participants
participants (4)
-
guillaume＠xwiki.com -
Marco Fabbri -
Neo Anderson -
Robert Hercz