Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2).
Hi all, Me again, this time with another groups/permission issue. On my wiki's I use "$context.xWiki.groupService.listGroupsForUser($context.user, $context.context))" to get a list of groups a user is a member of. This has worked very well up until implementing a virtual wiki setup...since implementing a virtual wiki setup, I've found the listGroupsForUser only works for the main wiki (the one pointing to xwiki database), and not for the "other" wiki's hanging on the same server. The users are definitely regarded as being in the group as a permission check works for the group (eg if only group ABC has right EDIT for a space, the user is granted the right only if they are in the group). But, the listGroupsForUser always returns no groups, even for XWiki.Admin - even though every user has at least one group. Brandon Esbach Software Engineer M/A-Com Eurotec Operations LoughMahon Technology Park, Skehard Road, Blackrock, Cork, Ireland Tel +353 21 4808305
AFAIK: The API you are using requires programming rights, and these rights are only possible for users in the main wiki. Try this: - Create an account on the main wiki, with an username that does not exist in the other virtual wikis - Grant Programming rights to that user - Login with that user - Edit and save the pages that list the users Now it should work. Sergiu Dumitriu On 1/10/07, Esbach, Brandon <[email protected]> wrote:
Hi all,
Me again, this time with another groups/permission issue.
On my wiki's I use "$context.xWiki.groupService.listGroupsForUser($context.user, $context.context))" to get a list of groups a user is a member of. This has worked very well up until implementing a virtual wiki setup…since implementing a virtual wiki setup, I've found the listGroupsForUser only works for the main wiki (the one pointing to xwiki database), and not for the "other" wiki's hanging on the same server.
The users are definitely regarded as being in the group as a permission check works for the group (eg if only group ABC has right EDIT for a space, the user is granted the right only if they are in the group).
But, the listGroupsForUser always returns no groups, even for XWiki.Admin- even though every user has at least one group.
*Brandon Esbach* *Software Engineer* *M/A-Com Eurotec Operations* *LoughMahon Technology Park,* *Skehard Road,* *Blackrock,* *Cork, Ireland* *Tel +353 21 4808305*
-- You receive this message as a subscriber of the [email protected] list. To unsubscribe: mailto:[email protected] For general help: mailto:[email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
Thanks Sergui, works perfectly when I make that change. Odd thing, those classes were created quite some time before the virtual wiki setup was implemented - would have thought they should not be affected by that. Almost a bug though: as an administrator, if I trust a user sufficiently that I grant them admin rights to the virtual wiki, they really should be able to do anything on that wiki, regardless of whether they exist on the main wiki or not; might just be me though thinks that way! ________________________________ From: Sergiu Dumitriu [mailto:[email protected]] Sent: 10 January 2007 20:10 To: [email protected] Subject: Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). AFAIK: The API you are using requires programming rights, and these rights are only possible for users in the main wiki. Try this: - Create an account on the main wiki, with an username that does not exist in the other virtual wikis - Grant Programming rights to that user - Login with that user - Edit and save the pages that list the users Now it should work. Sergiu Dumitriu On 1/10/07, Esbach, Brandon <[email protected]> wrote: Hi all, Me again, this time with another groups/permission issue. On my wiki's I use "$context.xWiki.groupService.listGroupsForUser($context.user, $context.context))" to get a list of groups a user is a member of. This has worked very well up until implementing a virtual wiki setup...since implementing a virtual wiki setup, I've found the listGroupsForUser only works for the main wiki (the one pointing to xwiki database), and not for the "other" wiki's hanging on the same server. The users are definitely regarded as being in the group as a permission check works for the group (eg if only group ABC has right EDIT for a space, the user is granted the right only if they are in the group). But, the listGroupsForUser always returns no groups, even for XWiki.Admin - even though every user has at least one group. Brandon Esbach Software Engineer M/A-Com Eurotec Operations LoughMahon Technology Park, Skehard Road, Blackrock, Cork, Ireland Tel +353 21 4808305 -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected] <mailto:[email protected]> ?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
Maybe there should be a setting in xwiki.cfg to customize whether or not programming rights can be granted on a virtual wiki. These rights were designed only for global administrators because they are quite dangerous. A user having PR can change any document or alter the database directly, and almost anything an administrator should be allowed to do can be achieved without using PR. And maybe we should have an API for listing the groups a user is in. On 1/11/07, Esbach, Brandon <[email protected]> wrote:
Thanks Sergui, works perfectly when I make that change. Odd thing, those classes were created quite some time before the virtual wiki setup was implemented - would have thought they should not be affected by that.
Almost a bug though: as an administrator, if I trust a user sufficiently that I grant them admin rights to the virtual wiki, they really should be able to do anything on that wiki, regardless of whether they exist on the main wiki or not; might just be me though thinks that way!
------------------------------ *From:* Sergiu Dumitriu [mailto:[email protected]] *Sent:* 10 January 2007 20:10 *To:* [email protected] *Subject:* Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2).
AFAIK: The API you are using requires programming rights, and these rights are only possible for users in the main wiki. Try this: - Create an account on the main wiki, with an username that does not exist in the other virtual wikis - Grant Programming rights to that user - Login with that user - Edit and save the pages that list the users
Now it should work.
Sergiu Dumitriu
On 1/10/07, Esbach, Brandon <[email protected]> wrote:
Hi all,
Me again, this time with another groups/permission issue.
On my wiki's I use "$context.xWiki.groupService.listGroupsForUser($context.user, $context.context))" to get a list of groups a user is a member of. This has worked very well up until implementing a virtual wiki setup…since implementing a virtual wiki setup, I've found the listGroupsForUser only works for the main wiki (the one pointing to xwiki database), and not for the "other" wiki's hanging on the same server.
The users are definitely regarded as being in the group as a permission check works for the group (eg if only group ABC has right EDIT for a space, the user is granted the right only if they are in the group).
But, the listGroupsForUser always returns no groups, even for XWiki.Admin - even though every user has at least one group.
*Brandon Esbach* *Software Engineer* *M/A-Com Eurotec Operations* *LoughMahon Technology Park,* *Skehard Road,* *Blackrock,* *Cork, Ireland* *Tel +353 21 4808305*
-- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
-- You receive this message as a subscriber of the [email protected] list. To unsubscribe: mailto:[email protected] For general help: mailto:[email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
I'd have to agree with you on all those points.. no standard user should ever be able to get access to the database directly. A simple call like $xwiki.isMemberOf("XWiki.ProjectManagersGroup") would be extremely useful, and require less frontend manipulation (a simple boolean check instead of a loop with string comparisons). Surely that kind of call could be done without need for PR rights though? ________________________________ From: Sergiu Dumitriu [mailto:[email protected]] Sent: 11 January 2007 13:26 To: [email protected] Subject: Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). Maybe there should be a setting in xwiki.cfg to customize whether or not programming rights can be granted on a virtual wiki. These rights were designed only for global administrators because they are quite dangerous. A user having PR can change any document or alter the database directly, and almost anything an administrator should be allowed to do can be achieved without using PR. And maybe we should have an API for listing the groups a user is in. On 1/11/07, Esbach, Brandon < [email protected] <mailto:[email protected]> > wrote: Thanks Sergui, works perfectly when I make that change. Odd thing, those classes were created quite some time before the virtual wiki setup was implemented - would have thought they should not be affected by that. Almost a bug though: as an administrator, if I trust a user sufficiently that I grant them admin rights to the virtual wiki, they really should be able to do anything on that wiki, regardless of whether they exist on the main wiki or not; might just be me though thinks that way! ________________________________ From: Sergiu Dumitriu [mailto:[email protected]] Sent: 10 January 2007 20:10 To: [email protected] Subject: Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). AFAIK: The API you are using requires programming rights, and these rights are only possible for users in the main wiki. Try this: - Create an account on the main wiki, with an username that does not exist in the other virtual wikis - Grant Programming rights to that user - Login with that user - Edit and save the pages that list the users Now it should work. Sergiu Dumitriu On 1/10/07, Esbach, Brandon <[email protected]> wrote: Hi all, Me again, this time with another groups/permission issue. On my wiki's I use "$context.xWiki.groupService.listGroupsForUser($context.user, $context.context))" to get a list of groups a user is a member of. This has worked very well up until implementing a virtual wiki setup...since implementing a virtual wiki setup, I've found the listGroupsForUser only works for the main wiki (the one pointing to xwiki database), and not for the "other" wiki's hanging on the same server. The users are definitely regarded as being in the group as a permission check works for the group (eg if only group ABC has right EDIT for a space, the user is granted the right only if they are in the group). But, the listGroupsForUser always returns no groups, even for XWiki.Admin - even though every user has at least one group. Brandon Esbach Software Engineer M/A-Com Eurotec Operations LoughMahon Technology Park, Skehard Road, Blackrock, Cork, Ireland Tel +353 21 4808305 -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected] <mailto:[email protected]> ?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected] <mailto:[email protected]> ?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
Sergiu, On 10B2 I don't seem to get a group listing for this API command, regardless of who saves the page.. showstopper for my installation planned this weekend. Is there an alteration to how the API is called in the new version? ________________________________ From: Esbach, Brandon [mailto:[email protected]] Sent: 11 January 2007 13:40 To: [email protected] Subject: RE: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). I'd have to agree with you on all those points.. no standard user should ever be able to get access to the database directly. A simple call like $xwiki.isMemberOf("XWiki.ProjectManagersGroup") would be extremely useful, and require less frontend manipulation (a simple boolean check instead of a loop with string comparisons). Surely that kind of call could be done without need for PR rights though? ________________________________ From: Sergiu Dumitriu [mailto:[email protected]] Sent: 11 January 2007 13:26 To: [email protected] Subject: Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). Maybe there should be a setting in xwiki.cfg to customize whether or not programming rights can be granted on a virtual wiki. These rights were designed only for global administrators because they are quite dangerous. A user having PR can change any document or alter the database directly, and almost anything an administrator should be allowed to do can be achieved without using PR. And maybe we should have an API for listing the groups a user is in. On 1/11/07, Esbach, Brandon < [email protected] <mailto:[email protected]> > wrote: Thanks Sergui, works perfectly when I make that change. Odd thing, those classes were created quite some time before the virtual wiki setup was implemented - would have thought they should not be affected by that. Almost a bug though: as an administrator, if I trust a user sufficiently that I grant them admin rights to the virtual wiki, they really should be able to do anything on that wiki, regardless of whether they exist on the main wiki or not; might just be me though thinks that way! ________________________________ From: Sergiu Dumitriu [mailto:[email protected]] Sent: 10 January 2007 20:10 To: [email protected] Subject: Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). AFAIK: The API you are using requires programming rights, and these rights are only possible for users in the main wiki. Try this: - Create an account on the main wiki, with an username that does not exist in the other virtual wikis - Grant Programming rights to that user - Login with that user - Edit and save the pages that list the users Now it should work. Sergiu Dumitriu On 1/10/07, Esbach, Brandon <[email protected]> wrote: Hi all, Me again, this time with another groups/permission issue. On my wiki's I use "$context.xWiki.groupService.listGroupsForUser($context.user, $context.context))" to get a list of groups a user is a member of. This has worked very well up until implementing a virtual wiki setup...since implementing a virtual wiki setup, I've found the listGroupsForUser only works for the main wiki (the one pointing to xwiki database), and not for the "other" wiki's hanging on the same server. The users are definitely regarded as being in the group as a permission check works for the group (eg if only group ABC has right EDIT for a space, the user is granted the right only if they are in the group). But, the listGroupsForUser always returns no groups, even for XWiki.Admin - even though every user has at least one group. Brandon Esbach Software Engineer M/A-Com Eurotec Operations LoughMahon Technology Park, Skehard Road, Blackrock, Cork, Ireland Tel +353 21 4808305 -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected] <mailto:[email protected]> ?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected] <mailto:[email protected]> ?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
Are users authenticated using the normal XWiki authentication, or LDAP? If it's normal login, I'll send you a simple velocity macro that checks if a user belongs to a group. On 1/11/07, Esbach, Brandon <[email protected]> wrote:
Sergiu,
On 10B2 I don't seem to get a group listing for this API command, regardless of who saves the page.. showstopper for my installation planned this weekend. Is there an alteration to how the API is called in the new version?
------------------------------ *From:* Esbach, Brandon [mailto:[email protected]] *Sent:* 11 January 2007 13:40 *To:* [email protected] *Subject:* RE: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2).
I'd have to agree with you on all those points.. no standard user should ever be able to get access to the database directly.
A simple call like $xwiki.isMemberOf("XWiki.ProjectManagersGroup") would be extremely useful, and require less frontend manipulation (a simple boolean check instead of a loop with string comparisons). Surely that kind of call could be done without need for PR rights though?
------------------------------ *From:* Sergiu Dumitriu [mailto:[email protected]] *Sent:* 11 January 2007 13:26 *To:* [email protected] *Subject:* Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2).
Maybe there should be a setting in xwiki.cfg to customize whether or not programming rights can be granted on a virtual wiki. These rights were designed only for global administrators because they are quite dangerous. A user having PR can change any document or alter the database directly, and almost anything an administrator should be allowed to do can be achieved without using PR.
And maybe we should have an API for listing the groups a user is in.
On 1/11/07, Esbach, Brandon < [email protected]> wrote:
Thanks Sergui, works perfectly when I make that change. Odd thing, those classes were created quite some time before the virtual wiki setup was implemented - would have thought they should not be affected by that.
Almost a bug though: as an administrator, if I trust a user sufficiently that I grant them admin rights to the virtual wiki, they really should be able to do anything on that wiki, regardless of whether they exist on the main wiki or not; might just be me though thinks that way!
------------------------------ *From:* Sergiu Dumitriu [mailto:[email protected]] *Sent:* 10 January 2007 20:10 *To:* [email protected] *Subject:* Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2).
AFAIK: The API you are using requires programming rights, and these rights are only possible for users in the main wiki. Try this: - Create an account on the main wiki, with an username that does not exist in the other virtual wikis - Grant Programming rights to that user - Login with that user - Edit and save the pages that list the users
Now it should work.
Sergiu Dumitriu
On 1/10/07, Esbach, Brandon <[email protected]> wrote:
Hi all,
Me again, this time with another groups/permission issue.
On my wiki's I use "$context.xWiki.groupService.listGroupsForUser($context.user, $context.context))" to get a list of groups a user is a member of. This has worked very well up until implementing a virtual wiki setup…since implementing a virtual wiki setup, I've found the listGroupsForUser only works for the main wiki (the one pointing to xwiki database), and not for the "other" wiki's hanging on the same server.
The users are definitely regarded as being in the group as a permission check works for the group (eg if only group ABC has right EDIT for a space, the user is granted the right only if they are in the group).
But, the listGroupsForUser always returns no groups, even for XWiki.Admin - even though every user has at least one group.
*Brandon Esbach* *Software Engineer* *M/A-Com Eurotec Operations* *LoughMahon Technology Park,* *Skehard Road,* *Blackrock,* *Cork, Ireland* *Tel +353 21 4808305*
-- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
-- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
-- You receive this message as a subscriber of the [email protected] list. To unsubscribe: mailto:[email protected] For general help: mailto:[email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
All through normal login. ________________________________ From: Sergiu Dumitriu [mailto:[email protected]] Sent: 11 January 2007 17:37 To: [email protected] Subject: Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). Are users authenticated using the normal XWiki authentication, or LDAP? If it's normal login, I'll send you a simple velocity macro that checks if a user belongs to a group. On 1/11/07, Esbach, Brandon <[email protected]> wrote: Sergiu, On 10B2 I don't seem to get a group listing for this API command, regardless of who saves the page.. showstopper for my installation planned this weekend. Is there an alteration to how the API is called in the new version? ________________________________ From: Esbach, Brandon [mailto:[email protected]] Sent: 11 January 2007 13:40 To: [email protected] Subject: RE: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). I'd have to agree with you on all those points.. no standard user should ever be able to get access to the database directly. A simple call like $xwiki.isMemberOf("XWiki.ProjectManagersGroup") would be extremely useful, and require less frontend manipulation (a simple boolean check instead of a loop with string comparisons). Surely that kind of call could be done without need for PR rights though? ________________________________ From: Sergiu Dumitriu [mailto:[email protected]] Sent: 11 January 2007 13:26 To: [email protected] Subject: Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). Maybe there should be a setting in xwiki.cfg to customize whether or not programming rights can be granted on a virtual wiki. These rights were designed only for global administrators because they are quite dangerous. A user having PR can change any document or alter the database directly, and almost anything an administrator should be allowed to do can be achieved without using PR. And maybe we should have an API for listing the groups a user is in. On 1/11/07, Esbach, Brandon < [email protected] <mailto:[email protected]> > wrote: Thanks Sergui, works perfectly when I make that change. Odd thing, those classes were created quite some time before the virtual wiki setup was implemented - would have thought they should not be affected by that. Almost a bug though: as an administrator, if I trust a user sufficiently that I grant them admin rights to the virtual wiki, they really should be able to do anything on that wiki, regardless of whether they exist on the main wiki or not; might just be me though thinks that way! ________________________________ From: Sergiu Dumitriu [mailto:[email protected]] Sent: 10 January 2007 20:10 To: [email protected] Subject: Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). AFAIK: The API you are using requires programming rights, and these rights are only possible for users in the main wiki. Try this: - Create an account on the main wiki, with an username that does not exist in the other virtual wikis - Grant Programming rights to that user - Login with that user - Edit and save the pages that list the users Now it should work. Sergiu Dumitriu On 1/10/07, Esbach, Brandon <[email protected]> wrote: Hi all, Me again, this time with another groups/permission issue. On my wiki's I use "$context.xWiki.groupService.listGroupsForUser($context.user, $context.context))" to get a list of groups a user is a member of. This has worked very well up until implementing a virtual wiki setup...since implementing a virtual wiki setup, I've found the listGroupsForUser only works for the main wiki (the one pointing to xwiki database), and not for the "other" wiki's hanging on the same server. The users are definitely regarded as being in the group as a permission check works for the group (eg if only group ABC has right EDIT for a space, the user is granted the right only if they are in the group). But, the listGroupsForUser always returns no groups, even for XWiki.Admin - even though every user has at least one group. Brandon Esbach Software Engineer M/A-Com Eurotec Operations LoughMahon Technology Park, Skehard Road, Blackrock, Cork, Ireland Tel +353 21 4808305 -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected] <mailto:[email protected]> ?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected] <mailto:[email protected]> ?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected] <mailto:[email protected]> ?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
Hm, I forgot I already did this. $xwiki.getUser("XWiki.username").isUserInGroup("XWiki.Group") This works with the beta versions. On 1/11/07, Esbach, Brandon <[email protected]> wrote:
All through normal login.
------------------------------ *From:* Sergiu Dumitriu [mailto:[email protected]] *Sent:* 11 January 2007 17:37 *To:* [email protected] *Subject:* Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2).
Are users authenticated using the normal XWiki authentication, or LDAP?
If it's normal login, I'll send you a simple velocity macro that checks if a user belongs to a group.
On 1/11/07, Esbach, Brandon <[email protected]> wrote:
Sergiu,
On 10B2 I don't seem to get a group listing for this API command, regardless of who saves the page.. showstopper for my installation planned this weekend. Is there an alteration to how the API is called in the new version?
------------------------------ *From:* Esbach, Brandon [mailto:[email protected]] *Sent:* 11 January 2007 13:40 *To:* [email protected] *Subject:* RE: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2).
I'd have to agree with you on all those points.. no standard user should ever be able to get access to the database directly.
A simple call like $xwiki.isMemberOf("XWiki.ProjectManagersGroup") would be extremely useful, and require less frontend manipulation (a simple boolean check instead of a loop with string comparisons). Surely that kind of call could be done without need for PR rights though?
------------------------------ *From:* Sergiu Dumitriu [mailto:[email protected]] *Sent:* 11 January 2007 13:26 *To:* [email protected] *Subject:* Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2).
Maybe there should be a setting in xwiki.cfg to customize whether or not programming rights can be granted on a virtual wiki. These rights were designed only for global administrators because they are quite dangerous. A user having PR can change any document or alter the database directly, and almost anything an administrator should be allowed to do can be achieved without using PR.
And maybe we should have an API for listing the groups a user is in.
On 1/11/07, Esbach, Brandon < [email protected]> wrote:
Thanks Sergui, works perfectly when I make that change. Odd thing, those classes were created quite some time before the virtual wiki setup was implemented - would have thought they should not be affected by that.
Almost a bug though: as an administrator, if I trust a user sufficiently that I grant them admin rights to the virtual wiki, they really should be able to do anything on that wiki, regardless of whether they exist on the main wiki or not; might just be me though thinks that way!
------------------------------ *From:* Sergiu Dumitriu [mailto:[email protected]] *Sent:* 10 January 2007 20:10 *To:* [email protected] *Subject:* Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2).
AFAIK: The API you are using requires programming rights, and these rights are only possible for users in the main wiki. Try this: - Create an account on the main wiki, with an username that does not exist in the other virtual wikis - Grant Programming rights to that user - Login with that user - Edit and save the pages that list the users
Now it should work.
Sergiu Dumitriu
On 1/10/07, Esbach, Brandon <[email protected]> wrote:
Hi all,
Me again, this time with another groups/permission issue.
On my wiki's I use "$context.xWiki.groupService.listGroupsForUser($context.user, $context.context))" to get a list of groups a user is a member of. This has worked very well up until implementing a virtual wiki setup…since implementing a virtual wiki setup, I've found the listGroupsForUser only works for the main wiki (the one pointing to xwiki database), and not for the "other" wiki's hanging on the same server.
The users are definitely regarded as being in the group as a permission check works for the group (eg if only group ABC has right EDIT for a space, the user is granted the right only if they are in the group).
But, the listGroupsForUser always returns no groups, even for XWiki.Admin - even though every user has at least one group.
*Brandon Esbach* *Software Engineer* *M/A-Com Eurotec Operations* *LoughMahon Technology Park,* *Skehard Road,* *Blackrock,* *Cork, Ireland* *Tel +353 21 4808305*
-- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
-- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
-- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
-- You receive this message as a subscriber of the [email protected] list. To unsubscribe: mailto:[email protected] For general help: mailto:[email protected]?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
Thanks Sergiu, That works perfectly! ________________________________ From: Sergiu Dumitriu [mailto:[email protected]] Sent: 11 January 2007 21:41 To: [email protected] Subject: Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). Hm, I forgot I already did this. $xwiki.getUser("XWiki.username").isUserInGroup("XWiki.Group") This works with the beta versions. On 1/11/07, Esbach, Brandon <[email protected]> wrote: All through normal login. ________________________________ From: Sergiu Dumitriu [mailto:[email protected]] Sent: 11 January 2007 17:37 To: [email protected] Subject: Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). Are users authenticated using the normal XWiki authentication, or LDAP? If it's normal login, I'll send you a simple velocity macro that checks if a user belongs to a group. On 1/11/07, Esbach, Brandon <[email protected]> wrote: Sergiu, On 10B2 I don't seem to get a group listing for this API command, regardless of who saves the page.. showstopper for my installation planned this weekend. Is there an alteration to how the API is called in the new version? ________________________________ From: Esbach, Brandon [mailto:[email protected]] Sent: 11 January 2007 13:40 To: [email protected] Subject: RE: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). I'd have to agree with you on all those points.. no standard user should ever be able to get access to the database directly. A simple call like $xwiki.isMemberOf("XWiki.ProjectManagersGroup") would be extremely useful, and require less frontend manipulation (a simple boolean check instead of a loop with string comparisons). Surely that kind of call could be done without need for PR rights though? ________________________________ From: Sergiu Dumitriu [mailto:[email protected]] Sent: 11 January 2007 13:26 To: [email protected] Subject: Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). Maybe there should be a setting in xwiki.cfg to customize whether or not programming rights can be granted on a virtual wiki. These rights were designed only for global administrators because they are quite dangerous. A user having PR can change any document or alter the database directly, and almost anything an administrator should be allowed to do can be achieved without using PR. And maybe we should have an API for listing the groups a user is in. On 1/11/07, Esbach, Brandon < [email protected] <mailto:[email protected]> > wrote: Thanks Sergui, works perfectly when I make that change. Odd thing, those classes were created quite some time before the virtual wiki setup was implemented - would have thought they should not be affected by that. Almost a bug though: as an administrator, if I trust a user sufficiently that I grant them admin rights to the virtual wiki, they really should be able to do anything on that wiki, regardless of whether they exist on the main wiki or not; might just be me though thinks that way! ________________________________ From: Sergiu Dumitriu [mailto:[email protected]] Sent: 10 January 2007 20:10 To: [email protected] Subject: Re: [xwiki-users] Virtual wiki's and groupmembership (implemented on 0.9.840 due for upgrade to 1.0b2). AFAIK: The API you are using requires programming rights, and these rights are only possible for users in the main wiki. Try this: - Create an account on the main wiki, with an username that does not exist in the other virtual wikis - Grant Programming rights to that user - Login with that user - Edit and save the pages that list the users Now it should work. Sergiu Dumitriu On 1/10/07, Esbach, Brandon <[email protected]> wrote: Hi all, Me again, this time with another groups/permission issue. On my wiki's I use "$context.xWiki.groupService.listGroupsForUser($context.user, $context.context))" to get a list of groups a user is a member of. This has worked very well up until implementing a virtual wiki setup...since implementing a virtual wiki setup, I've found the listGroupsForUser only works for the main wiki (the one pointing to xwiki database), and not for the "other" wiki's hanging on the same server. The users are definitely regarded as being in the group as a permission check works for the group (eg if only group ABC has right EDIT for a space, the user is granted the right only if they are in the group). But, the listGroupsForUser always returns no groups, even for XWiki.Admin - even though every user has at least one group. Brandon Esbach Software Engineer M/A-Com Eurotec Operations LoughMahon Technology Park, Skehard Road, Blackrock, Cork, Ireland Tel +353 21 4808305 -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected] <mailto:[email protected]> ?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected] <mailto:[email protected]> ?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected] <mailto:[email protected]> ?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws -- You receive this message as a subscriber of the [email protected] mailing list. To unsubscribe: mailto: [email protected] For general help: mailto: [email protected] <mailto:[email protected]> ?subject=help ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
participants (2)
-
Esbach, Brandon -
Sergiu Dumitriu