Details
-
Bug
-
Resolution: Fixed
-
Major
-
None
-
None
Description
If the scheduler is accessed by an user that has no programming right, but can view the Scheduler page, he can trigger operations on Jobs that won't be allowed for him, thus raising a exception.
Such users (like admins with no programming rights for example) should have a "read-only" access to the job table + see a warning that say they need programming rights to actually use the scheduler.
Attachments
Issue Links
- causes
-
XWIKI-21663 Scheduler in subwiki allows scheduling operations for any main wiki user
- Closed