[xwiki-users] Rights
Hi, I get always "Your are not allowed to view this page". However, I think the used account has enough rights. It there a way to check which rights are missing? Stefan Bachert __________________________________________________ Do You Yahoo!? Sie sind Spam leid? Yahoo! Mail verfügt über einen herausragenden Schutz gegen Massenmails. http://mail.yahoo.com
It might be some external part such as the menu panels which you can't view. try: /bin/view/<YourSpace>/<YourPage>?xpage=plain If it still shows the error then it's definitly the page you can't access. To answer your question: You can check the rights of a given user with the administration rights section. Make sure you check for rights in /bin/admin/XWiki/XWikiPreferences and also in /bin/admin/<YourSpace>/WebPreferences Rights can be denied in a space even if they are allowed globally. Rights can also be denied for a single page so check /bin/edit/<YourSpace>/<YourPage>?editor=rights Caleb James DeLisle stefan bachert wrote:
Hi,
I get always "Your are not allowed to view this page". However, I think the used account has enough rights. It there a way to check which rights are missing?
Stefan Bachert
__________________________________________________ Do You Yahoo!? Sie sind Spam leid? Yahoo! Mail verfügt über einen herausragenden Schutz gegen Massenmails. http://mail.yahoo.com _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Hi, found out what went me wrong. I allowed viewing in the assigned user group, but I disabled viewing in the WikiAllGroup. It is surprising to me that the more general WikiAllGroup wins over the more specific assigned user group. However, when the more specific user group is no more able to change the value when defined at WikiAllGroup, the checkbox should either be invisible or readonly to reflect the current state Stefan Bachert -- View this message in context: http://n2.nabble.com/Rights-tp4608372p4617937.html Sent from the XWiki- Users mailing list archive at Nabble.com.
On Tue, Feb 23, 2010 at 10:54, Stefan Bachert <[email protected]> wrote:
Hi,
found out what went me wrong.
I allowed viewing in the assigned user group, but I disabled viewing in the WikiAllGroup.
It is surprising to me that the more general WikiAllGroup wins over the more specific assigned user group.
Actually it's more the deny that wins other the allow.
However, when the more specific user group is no more able to change the value when defined at WikiAllGroup, the checkbox should either be invisible or readonly to reflect the current state
Yes but currently the right manager UI does not resolve rights it just show the configuration of the current context. That's an improvement we want to do but that not on the top of the TODO list.
Stefan Bachert -- View this message in context: http://n2.nabble.com/Rights-tp4608372p4617937.html Sent from the XWiki- Users mailing list archive at Nabble.com. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
On 02/23/2010 10:54 AM, Stefan Bachert wrote:
Hi,
found out what went me wrong.
I allowed viewing in the assigned user group, but I disabled viewing in the WikiAllGroup.
It is surprising to me that the more general WikiAllGroup wins over the more specific assigned user group.
Deny rights are always stronger than allow rights. There is no group ordering, no notion of a "more specific" group.
However, when the more specific user group is no more able to change the value when defined at WikiAllGroup, the checkbox should either be invisible or readonly to reflect the current state
No, that is not right, since there is no known relationship between two groups. XWikiAllGroup could be much larger than the smaller group, thus the allow right is not always ignored, it correctly applies for all the users that are in XWikiAllGroup and not in your specific group. -- Sergiu Dumitriu http://purl.org/net/sergiu/
Hi,
However, when the more specific user group is no more able to change the value when defined at WikiAllGroup, the checkbox should either be invisible or readonly to reflect the current state
No, that is not right, since there is no known relationship between two groups. XWikiAllGroup could be much larger than the smaller group, thus the allow right is not always ignored, it correctly applies for all the users that are in XWikiAllGroup and not in your specific group.
There is no relationship?? From the name any user is part of XWikiAllGroup (I don't know what is implemented). That is the relationship. I consider this as a design bug when the more general wins over the more specific. This approach means I have to set ALL specific values right, I could NOT use the general for common setting overwriting it at some exceptions. This leads to unmangable situation when have more than a few groups. Stefan Bachert __________________________________________________ Do You Yahoo!? Sie sind Spam leid? Yahoo! Mail verfügt über einen herausragenden Schutz gegen Massenmails. http://mail.yahoo.com
participants (5)
-
Caleb James DeLisle -
Sergiu Dumitriu -
stefan bachert -
Stefan Bachert -
Thomas Mortagne