Details
-
Idea
-
Resolution: Unresolved
-
Minor
-
None
-
6.2.2
-
None
-
Unknown
-
Description
Users sometimes need admin or programming privileges in the wiki (e.g. to save a page containing code), but in general a smaller set of privileges suffices. Bob (without programming rights) might write a page containing groovy, and then to get this working would have to log out and login as a user with higher privileges (bobAdmin, say) to edit the page and re-save the page to allow the code to run. This is a bit like traditional UNIX where good practice is to typically work as a non-root user but switch to root (e.g. using su) when required, although in this approach the original user need not log out.
A nicer alternative, similar to modern "sudo" approaches in, e.g. Ubuntu, would be for bob to be able to temporarily use higher privileges from within his account, perhaps re-authenticating to ensure this is not done lightly. In the above example, bob might have a drop-down option on the "Save" button to "Save with Programming Rights Enabled" and be required to enter his password to confirm.
Attachments
Issue Links
- is related to
-
XWIKI-6647 Impersonation feature
-
- Open
-
- relates to
-
XWIKI-13906 Add a "user" parameter to the Context Macro to control the current user
-
- Open
-