On 12/26/2011 12:40 AM, mohit gupta wrote: Search results should only display what is normally visible by the current user. So, even though you might succeed in making Lucene not return these users in a query, the user profiles are still visible to the user. Another point, all users should normally be in at least one common group, XWiki.XWikiAllGroup, unless you explicitly disable this feature. Still, to answer your question, it should be possible to configure the search results so that it displays only users having a group in common, but it's not very easy. One problem is that groups are defined in a group document, while Lucene only considers one document at a time, so whenever it's considering whether or not to include a user document in the results, it doesn't have access to the group definition, so you'll have to somehow use this information some other way. One option is to change the indexing process so that each Lucene document corresponding to a user should also list all the groups that user belongs to. Another option is to post-filter the results returned by Lucene so that you remove all the user profiles that shouldn't be returned. -- Sergiu Dumitriu http://purl.org/net/sergiu/ ______________________________**_________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/**mailman/listinfo/users<http://lists.xwiki.org/m…

Hi Sergiu, Just to give more clarification about my original post I want to configure it in a way user should be able to search *and view* the other users who belongs to same group otherwise it should not be able to search *and view* other group user details

On Mon, Dec 26, 2011 at 12:20 PM, mohit gupta&lt;motgupta(a)gmail.com&gt; wrote: > Thanks Sergiu.As you told * Another option is to post-filter the results > returned by Lucene so that you remove all the user profiles that shouldn't > be returned. * I am also looking this kind of option but not getting in > which java class i need to make change for this.If you can throw some light > on this, it would be a great help. > > > On Mon, Dec 26, 2011 at 11:49 AM, Sergiu Dumitriu&lt;sergiu(a)xwiki.com&gt;wrote;wrote: > >> On 12/26/2011 12:40 AM, mohit gupta wrote: >> >>> I have configured to use Lucene search in my xwiki application. Right now >>> in xwiki , any user is able to search any other user details by >>> entering his deatils in serach text box.I want to configure it in a way >>> user should be able to search the other users who belongs to same group >>> otherwise it should not other group user details. Is it configurable in >>> xwiki or i need to make some changes in code for the same.Thanks. >>> >> >> Search results should only display what is normally visible by the >> current user. So, even though you might succeed in making Lucene not return >> these users in a query, the user profiles are still visible to the user. >> >> Another point, all users should normally be in at least one common group, >> XWiki.XWikiAllGroup, unless you explicitly disable this feature. >> >> Still, to answer your question, it should be possible to configure the >> search results so that it displays only users having a group in common, but >> it's not very easy. One problem is that groups are defined in a group >> document, while Lucene only considers one document at a time, so whenever >> it's considering whether or not to include a user document in the results, >> it doesn't have access to the group definition, so you'll have to somehow >> use this information some other way. One option is to change the indexing >> process so that each Lucene document corresponding to a user should also >> list all the groups that user belongs to. Another option is to post-filter >> the results returned by Lucene so that you remove all the user profiles >> that shouldn't be returned.

Hi Sergiu, Then you should take care of how you grant view rights to the group page. I guess it should be enough to make only one change: on the group page, grant view right (and you should also grant edit right) to the group itself, without specifying any other grant/deny rights. With above configuration also user is able to search and view user details who belongs to other group :(

On Tue, Dec 27, 2011 at 12:37 PM, Sergiu Dumitriu&lt;sergiu(a)xwiki.com&gt; wrote: > On 12/26/2011 02:27 AM, mohit gupta wrote: > >> Hi Sergiu, >> >> Just to give more clarification about my original post I want to >> configure it in a way user should be able to search *and view* the >> other >> users who belongs to same group otherwise it should not be able to search >> *and >> view* other group user details >> > > Then you should take care of how you grant view rights to the group page. > I guess it should be enough to make only one change: on the group page, > grant view right (and you should also grant edit right) to the group > itself, without specifying any other grant/deny rights. > > On Mon, Dec 26, 2011 at 12:20 PM, mohit gupta&lt;motgupta(a)gmail.com&gt; wrote: >> >> Thanks Sergiu.As you told * Another option is to post-filter the results >>> >>> returned by Lucene so that you remove all the user profiles that >>> shouldn't >>> be returned. * I am also looking this kind of option but not getting in >>> >>> which java class i need to make change for this.If you can throw some >>> light >>> on this, it would be a great help. >>> >>> >>> On Mon, Dec 26, 2011 at 11:49 AM, Sergiu Dumitriu&lt;sergiu(a)xwiki.com&gt;** >>> wrote: >>> >>> On 12/26/2011 12:40 AM, mohit gupta wrote: >>>> >>>> I have configured to use Lucene search in my xwiki application. Right >>>>> now >>>>> in xwiki , any user is able to search any other user details by >>>>> entering his deatils in serach text box.I want to configure it in a way >>>>> user should be able to search the other users who belongs to same >>>>> group >>>>> otherwise it should not other group user details. Is it configurable in >>>>> xwiki or i need to make some changes in code for the same.Thanks. >>>>> >>>>> >>>> Search results should only display what is normally visible by the >>>> current user. So, even though you might succeed in making Lucene not >>>> return >>>> these users in a query, the user profiles are still visible to the user. >>>> >>>> Another point, all users should normally be in at least one common >>>> group, >>>> XWiki.XWikiAllGroup, unless you explicitly disable this feature. >>>> >>>> Still, to answer your question, it should be possible to configure the >>>> search results so that it displays only users having a group in common, >>>> but >>>> it's not very easy. One problem is that groups are defined in a group >>>> document, while Lucene only considers one document at a time, so >>>> whenever >>>> it's considering whether or not to include a user document in the >>>> results, >>>> it doesn't have access to the group definition, so you'll have to >>>> somehow >>>> use this information some other way. One option is to change the >>>> indexing >>>> process so that each Lucene document corresponding to a user should also >>>> list all the groups that user belongs to. Another option is to >>>> post-filter >>>> the results returned by Lucene so that you remove all the user profiles >>>> that shouldn't be returned. >>>>