Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-4493

User profile page is created with rights allowing any user to delete another user's profile

    XMLWordPrintable

Details

    • Bug
    • Resolution: Cannot Reproduce
    • Major
    • None
    • 2.0
    • {Unused} Core
    • None
    • Unknown

    Description

      When a user registers a profile page is created and the edit right is set for the user and the Admin group. However the delete right is not set which defaults to allowing any user to view and then delete another user's profile. If the user profile is deleted the user cannot log in to xwiki.

      The user profile page should be created with edit,delete right assigned to the user.

      Attachments

        Activity

          People

            sdumitriu Sergiu Dumitriu
            glenne Glenn Engel
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: