On Thu, Jun 26, 2014 at 1:26 PM, O.J. Sousa Rodrigues <[email protected]> wrote:

hi there, just upgraded to 6.0.1 from 5.4.4 and now experiencing weird permission behavior, new added users via ldap has no rights to access the main page, but can create spaces and even edit the main page without being in any group at all

adding them to a group or giving the user admin rights does not change anything.

already tried to: having the user isolated in a own group, granting the user admin rights, CheckProgrammingRights with the admin script, reinstalling the main ui core extension, but nothing seams to help

there are no users in the allgroup and the allgroup has no permission active.

This sounds weird. Having nothing in XWikiAllGroup usually means that you made xwiki.users.initialGroups empty in xwiki.cfg. Maybe you forgot to also set xwiki.authentication.group.allgroupimplicit to 1 in 6.0.1.

adding the user to that group or adding permission to that group did not change anything...

meanwhile installing the 6.0.1 fresh on a debian to start debugging ...

best regards _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne

On Fri, Jun 27, 2014 at 2:55 PM, O.J. Sousa Rodrigues <[email protected]> wrote:

Hi there!

Thank you for you answer.

It's really seams to be broken / mal-configured. I manually removed the users from the allGroup for testing. Both properties xwiki.users.initialGroups and xwiki.authentication.group.allgroupimplicit are commented / deactivated, but new users do land in the allGroup without problem.

What worries me the most is that if the user has no group at all and no permission at all it still can see and edit the wiki.

Don't see how that is going to help activating those properties since users in no group should have no permission granted at all right? And users that are not in the allGroup but inside an explicit group should have that group's permission, but that is not the case...

There is no reason to enable these properties but you said that the XWikiAllGroup group was empty which is was I reacted to.

Best regards, OJ _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne

After deleting the folder: '/var/lib/xwiki/data/jobs' and restartting the VM the problem went away. Good thing xwiki repairs it self :) Thanks for the support.

Or do you mean you deleted it to execute the distribution wizard again ? On Mon, Jun 30, 2014 at 12:29 PM, Thomas Mortagne <[email protected]> wrote:

I really don't see how '/var/lib/xwiki/data/jobs' could be related to a right issue. There is just logs basically in there.

On Mon, Jun 30, 2014 at 12:15 PM, O.J. Sousa Rodrigues <[email protected]> wrote:

...

After deleting the folder: '/var/lib/xwiki/data/jobs' and restartting the VM the problem went away. Good thing xwiki repairs it self :)

Thanks for the support. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users

-- Thomas Mortagne

-- Thomas Mortagne