6 Dec
2008
6 Dec
'08
3:10 a.m.
I'm using XWiki Enterprise version 1.6.1.13621. I was following the
instructions in the FAQ to forbid registration (
http://www.xwiki.org/xwiki/bin/view/FAQ/HowCanIForbidRegistration, which
seems to be out-of-date for my version BTW) and noticed some strange
behavior. I don't want anyone to self-register so I denied access in the
"Register" column of the "Rights" admin page for all groups. I logged
out
and noticed the register link was still on the page. I tried registering a
fake user and it worked. After playing around for a while I figured out
that I had to actually grant Register access for the XWikiAdminGroup group
to get the Register link to disappear. If I deny Register access or just
leave it blank for the XWikiAdminGroup group the Register link is present
and works. This is backwards to me. Without looking at the code it seems
like a logical error somewhere. Could someone tell me whether I'm
understanding this process correctly or not?
--
Nick Watts
blog: thewonggei.wordpress.com
6 Dec
6 Dec
9:47 a.m.
Hi,
We need to modify http://platform.xwiki.org/xwiki/bin/view/Features/RightsManagement
to explain this. I think Jerome is working on this.
Basically when you allow a right to a group it means the other groups
won't have it allowed unless you explicitely allow them.
I don't full remember the rationale behind this, maybe Sergiu or
Ludovic can help here. That said I do agree it's not self explicit and
I'd be for changing that although that would be a big change (we need
to discuss it for when we're going to rewrite the authorization module).
Thanks
-Vincent
On Dec 6, 2008, at 3:10 AM, Nick Watts wrote:
I'm using XWiki Enterprise version 1.6.1.13621. I
was following the
instructions in the FAQ to forbid registration (
http://www.xwiki.org/xwiki/bin/view/FAQ/HowCanIForbidRegistration,
which
seems to be out-of-date for my version BTW) and noticed some strange
behavior. I don't want anyone to self-register so I denied access
in the
"Register" column of the "Rights" admin page for all groups. I
logged out
and noticed the register link was still on the page. I tried
registering a
fake user and it worked. After playing around for a while I figured
out
that I had to actually grant Register access for the XWikiAdminGroup
group
to get the Register link to disappear. If I deny Register access or
just
leave it blank for the XWikiAdminGroup group the Register link is
present
and works. This is backwards to me. Without looking at the code it
seems
like a logical error somewhere. Could someone tell me whether I'm
understanding this process correctly or not?
--
Nick Watts
blog: thewonggei.wordpress.com
12:01 p.m.
Nick Watts wrote:
I'm using XWiki Enterprise version 1.6.1.13621. I
was following the
instructions in the FAQ to forbid registration (
http://www.xwiki.org/xwiki/bin/view/FAQ/HowCanIForbidRegistration, which
seems to be out-of-date for my version BTW) and noticed some strange
behavior. I don't want anyone to self-register so I denied access in the
"Register" column of the "Rights" admin page for all groups. I
logged out
and noticed the register link was still on the page. I tried registering a
fake user and it worked. After playing around for a while I figured out
that I had to actually grant Register access for the XWikiAdminGroup group
to get the Register link to disappear. If I deny Register access or just
leave it blank for the XWikiAdminGroup group the Register link is present
and works. This is backwards to me. Without looking at the code it seems
like a logical error somewhere. Could someone tell me whether I'm
understanding this process correctly or not?
Did you forbid the right to the guest also?
The guest appears when you select Users instead of Groups, and is the
first entry, above the filter, called "Unregistered Users".
To remove the registration link completely, you can override the
global.vm template in a custom skin. Admins will still be able to use
the Administration->Users interface to add users.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
18 Dec
18 Dec
1:16 p.m.
I apologize for my very delayed response. Yes, I did explicitly deny the
guest user access to Register. Here's what I found when playing around with
the permissions this morning. I don't want anyone to register so I
explicitly denied all groups access to Register. I also denied unregistered
users Register access. This scenario does not remove the register link.
However, if I allow any of the groups access to Register the link then gets
removed. I'm not sure if this is related to what Vincent said about group
permissions or not.
Did you forbid the right to the guest also?
The guest appears when you select Users instead of Groups, and is the
first entry, above the filter, called "Unregistered Users".
To remove the registration link completely, you can override the
global.vm template in a custom skin. Admins will still be able to use
the Administration->Users interface to add users.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Nick Watts
blog: thewonggei.wordpress.com
5751
days inactive
5763
days old
3 comments
3 participants
participants (3)
-
Nick Watts -
Sergiu Dumitriu -
Vincent Massol