10 Feb
2016
10 Feb
'16
3:07 p.m.
Hi,
My project want me to restrict import/export function to authorized users (for instance a
group). Is that possible? Indeed, it seems that having "view" rights
automatically enable import/export rights. Thank you.
--
Mon adresse THALES est antoine-b.tran(a)thalesgroup.com. +33 (0)5 62 88 84 40
11 Feb
11 Feb
10:35 p.m.
Hi,
On 10 Feb 2016 at 15:06:58, TRAN Antoine
(antoine-b.tran@thalesgroup.com(mailto:antoine-b.tran@thalesgroup.com)) wrote:
Hi,
My project want me to restrict import/export function to authorized users (for instance a
group). Is that possible? Indeed, it seems that having "view" rights
automatically enable import/export rights. Thank you.
—
- Import always require Admin permissions
- XAR Export always requires Admin permissions
- HTML Export is available to anyone who can view (the logic is that since they can view
pages, why wouldn’t they be able to get them?)
- PDF export is also available to anyone who can view (same logic I guess)
To override this behavior the easiest is to forbid the /export/ action in the web server
(apache, nginx, etc). There are others ways but they’re more complex.
Thanks
-Vincent
12 Feb
12 Feb
9:02 a.m.
On Thu, Feb 11, 2016 at 10:35 PM, vincent(a)massol.net <vincent(a)massol.net> wrote:
Hi,
On 10 Feb 2016 at 15:06:58, TRAN Antoine
(antoine-b.tran@thalesgroup.com(mailto:antoine-b.tran@thalesgroup.com)) wrote:
XAR import. Maybe Antoine is talking about office import ?
Hi,
My project want me to restrict import/export function to authorized users (for instance a
group). Is that possible? Indeed, it seems that having "view" rights
automatically enable import/export rights. Thank you.
—
- Import always require Admin permissions - XAR Export always requires Admin permissions
- HTML Export is available to anyone who can view (the logic is that since they can view
pages, why wouldn’t they be able to get them?)
- PDF export is also available to anyone who can view (same logic I guess)
To override this behavior the easiest is to forbid the /export/ action in the web server
(apache, nginx, etc). There are others ways but they’re more complex.
Thanks
-Vincent
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
--
Thomas Mortagne
3361
days inactive
3363
days old
2 comments
3 participants
participants (3)
-
Thomas Mortagne -
TRAN Antoine -
vincent＠massol.net