Details
-
Bug
-
Resolution: Duplicate
-
Blocker
-
None
-
6.4.3
-
Unknown
-
Description
After upgrading from 6.4.2 to 6.4.3 users in groups that have rights on a subwiki no longer have access to the subwiki.
Wiki setup: A main wiki with 6 subwikis. All users are members of the main wiki. In order to allow users rights to a subwiki, they are added into a group in the main wiki and then that group is given access on the subwiki. This worked in 6.4.2, however with the upgrade to 6.4.3, XWiki returns the following error when a user logs into a subwiki, even though the user is in a group that has access to the subwiki.
Failed to execute the [include] macro. Click on this message for details. org.xwiki.rendering.macro.MacroExecutionException: Current user [xwiki:XWiki.TestUser] doesn't have view rights on document [test:WikiManager.Dashboard] at org.xwiki.rendering.internal.macro.include.IncludeMacro.execute(IncludeMacro.java:151) at org.xwiki.rendering.internal.macro.include.IncludeMacro.execute(IncludeMacro.java:55) at org.xwiki.rendering.internal.transformation.macro.MacroTransformation.transform(MacroTransformation.java:252) at org.xwiki.rendering.internal.transformation.DefaultRenderingContext.transformInContext(DefaultRenderingContext.java:183) at org.xwiki.rendering.internal.transformation.DefaultTransformationManager.performTransformations(DefaultTransformationManager.java:94) at org.xwiki.display.internal.DocumentContentDisplayer.display(DocumentContentDisplayer.java:252) at org.xwiki.display.internal.DocumentContentDisplayer.display(DocumentContentDisplayer.java:125) at org.xwiki.display.internal.DocumentContentDisplayer.display(DocumentContentDisplayer.java:55) at org.xwiki.display.internal.DefaultDocumentDisplayer.display(DefaultDocumentDisplayer.java:96) at org.xwiki.display.internal.DefaultDocumentDisplayer.display(DefaultDocumentDisplayer.java:39) at org.xwiki.sheet.internal.SheetDocumentDisplayer.display(SheetDocumentDisplayer.java:113)…
Attempting to access a page within the subwiki gives this error:
Error You are not allowed to view this document or perform this action.
Attachments
Issue Links
- duplicates
-
XWIKI-12016 Spurious security access checks when group are involved
- Closed