[xwiki-users] Irritating problems with rights
We just switched to 7.3 and loved it! Cleaner look and Nested Spaces was what we where looking for. Thank you very much for this awesome work! What we are irritated about is something which is hopefully just a lack of understanding about rights. We have had groups and adjusted single pages according to our access policies. Everything worked as expected. After update to 7.3 all rights do not function anymore! The rights were not changed but now every user can access every single page - even "Administer Wiki" on the main wiki and on each subwiki! We reinvented our whole security rules and rights to the certain pages with no success. Could someone please support us in narrowing down this issue? -- View this message in context: http://xwiki.475771.n2.nabble.com/Irritating-problems-with-rights-tp7596882.... Sent from the XWiki- Users mailing list archive at Nabble.com.
Hi Tobias, On 16 Nov 2015 at 20:24:01, Tobias Kirchhofer ([email protected](mailto:[email protected])) wrote:
We just switched to 7.3 and loved it! Cleaner look and Nested Spaces was what we where looking for. Thank you very much for this awesome work!
Cool!
What we are irritated about is something which is hopefully just a lack of understanding about rights. We have had groups and adjusted single pages according to our access policies. Everything worked as expected. After update to 7.3 all rights do not function anymore! The rights were not changed but now every user can access every single page - even "Administer Wiki" on the main wiki and on each subwiki!
We reinvented our whole security rules and rights to the certain pages with no success.
Could someone please support us in narrowing down this issue?
Rest assured that we haven’t changed how rights worked and were set up. So we just need to find out what happened during your upgrade. This is really strange. At this point I have no point what could have happened. Could you check the rights page in the Admin UI and tell us what you see there for the guest user and for users and groups? Also, is it different from what you were seeing before? Is there a way for us to reproduce this? What version of XWiki were you using before upgrading to 7.3? Thanks -Vincent
Just noticed another thread with this problem: http://markmail.org/message/xzapsextekrsgml3 Two threads talking about the same issue, seems like we have a problem… :( I’ve asked the user to create a jira issue on the other thread. We’ll try to reproduce. Thanks -Vincent On 16 Nov 2015 at 20:32:59, [email protected] ([email protected](mailto:[email protected])) wrote:
Hi Tobias,
On 16 Nov 2015 at 20:24:01, Tobias Kirchhofer ([email protected](mailto:[email protected])) wrote:
We just switched to 7.3 and loved it! Cleaner look and Nested Spaces was what we where looking for. Thank you very much for this awesome work!
Cool!
What we are irritated about is something which is hopefully just a lack of understanding about rights. We have had groups and adjusted single pages according to our access policies. Everything worked as expected. After update to 7.3 all rights do not function anymore! The rights were not changed but now every user can access every single page - even "Administer Wiki" on the main wiki and on each subwiki!
We reinvented our whole security rules and rights to the certain pages with no success.
Could someone please support us in narrowing down this issue?
Rest assured that we haven’t changed how rights worked and were set up. So we just need to find out what happened during your upgrade. This is really strange. At this point I have no point what could have happened.
Could you check the rights page in the Admin UI and tell us what you see there for the guest user and for users and groups? Also, is it different from what you were seeing before?
Is there a way for us to reproduce this? What version of XWiki were you using before upgrading to 7.3?
Thanks -Vincent
We came from 7.1. Meanwhile we solved the issue by restoring the Main-Wiki database from backup. We store our data in subwikis, the main Wiki is just a welcome page and holds the user (ldap). After restore from backup the permission system worked like before also in subwikis. The rights settings here and there were the same before and after. Probably some weird side effect from migration. We use XWiki as an Intranet - no free registration. Tell me if we can support further with this issue. -- View this message in context: http://xwiki.475771.n2.nabble.com/XWiki-7-3-Irritating-problems-with-rights-... Sent from the XWiki- Users mailing list archive at Nabble.com.
Hi Tobias, What would be great is if you could use http://extensions.xwiki.org/xwiki/bin/view/Extension/Check+Security+Cache and give us the result. This should tell us why the permissions you have set do not produce any result. Two devs have been trying to reproduce the problem to no avail so far. So we really need more information on your setup before the migration. Running this extension could help a lot too. Thanks -Vincent On 17 Nov 2015 at 12:05:55, Tobias Kirchhofer ([email protected]) wrote: We came from 7.1. Meanwhile we solved the issue by restoring the Main-Wiki database from backup. We store our data in subwikis, the main Wiki is just a welcome page and holds the user (ldap). After restore from backup the permission system worked like before also in subwikis. The rights settings here and there were the same before and after. Probably some weird side effect from migration. We use XWiki as an Intranet - no free registration. Tell me if we can support further with this issue.
What i can provide is the status quo which is working https://cargo.shift.agency/data/public/xwiki We don't have an instance with a non working status, sorry. -- View this message in context: http://xwiki.475771.n2.nabble.com/XWiki-7-3-Irritating-problems-with-rights-... Sent from the XWiki- Users mailing list archive at Nabble.com.
Hi Tobias, On 17 Nov 2015 at 13:12:34, Tobias Kirchhofer ([email protected]) wrote: What i can provide is the status quo which is working https://cargo.shift.agency/data/public/xwiki We don't have an instance with a non working status, sorry. Thanks but that’s not going to be very useful :) You haven’t kept a backup of the non working instance by any chance? Is there a way for you to provide us with a zip of the original 7.1 instance that failed to upgrade yo 7.3 (with private data removed)? Thanks -Vincent
We could try to set up a „non-working“ instance by rebuilding a backup of the 7.1 version with the old database and upgrade again looking if the effect comes back.
From my point if view the other issue seems to be a different problem - our right settings remained, his setting remains not persistent http://markmail.org/message/xzapsextekrsgml3
What do you think? Thank you! Tobias On 17 Nov 2015, at 13:20, vmassol [via XWiki] wrote:
Hi Tobias, On 17 Nov 2015 at 13:12:34, Tobias Kirchhofer ([email protected]) wrote:
What i can provide is the status quo which is working
https://cargo.shift.agency/data/public/xwiki
We don't have an instance with a non working status, sorry.
Thanks but that’s not going to be very useful :)
You haven’t kept a backup of the non working instance by any chance?
Is there a way for you to provide us with a zip of the original 7.1 instance that failed to upgrade yo 7.3 (with private data removed)?
Thanks
-Vincent _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ If you reply to this email, your message will be added to the discussion below: http://xwiki.475771.n2.nabble.com/XWiki-7-3-Irritating-problems-with-rights-...
To unsubscribe from [XWiki 7.3] Irritating problems with rights, visit http://xwiki.475771.n2.nabble.com/template/NamlServlet.jtp?macro=unsubscribe...
-- Tobias Kirchhofer [email protected] signature.asc (859 bytes) <http://xwiki.475771.n2.nabble.com/attachment/7596891/0/signature.asc> -- View this message in context: http://xwiki.475771.n2.nabble.com/XWiki-7-3-Irritating-problems-with-rights-... Sent from the XWiki- Users mailing list archive at Nabble.com.
participants (2)
-
Tobias Kirchhofer -
vincent@massol.net