Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-11227

Use the sdoc XWikiContext property instead of hacking the content author when displaying a document with a sheet

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 6.3-milestone-1
    • 5.4.5
    • Old Core, Sheet
    • None
    • Unit
    • High
    • Easy
    • N/A
    • N/A

    Description

      Currently the sheet displayer sets the content author of the displayed document to the content author of the sheet in order to preserve the PR of the sheet. We can do better by simply setting the sheet as sdoc (security document) which is used to check PR.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-5027 In Syntax xwiki/2.x, programming rights may be inherited by inclusion which may leads to security issues

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-7941 PR leak in sheets when displaying TextArea properties

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-11223 Avoid hacking the context document content author by using XWikiContext sdoc hidden property in wiki macros

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-11226 XWikiDocument context document switch shoud take into account secure doc (sdoc)

          • Major - Major loss of function.
          • Closed
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-11235 Use the sdoc XWikiContext property instead of hacking the content author when switching WYSIWYG editor tabs

          • Major - Major loss of function.
          • Closed

          Activity

            People

              mflorea Marius Dumitru Florea
              mflorea Marius Dumitru Florea
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: