Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-14232

DeletedDocuments API checks the wrong rights

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 9.4-rc-1
    • 9.3
    • Old Core
    • None
    • Unknown
    • N/A
    • N/A

    Description

      Both DeletedDocument.canDelete and DeletedDocument.canUndelete check the admin right on the context document instead of the actual deleted document's location.

      Additionally, DeletedDocument.getDocument checks for (current context document) admin rights instead of simply relying on DeletedDocument.canUndelete.

      Attachments

        Issue Links

          Activity

            People

              enygma Eduard Moraru
              enygma Eduard Moraru
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: