Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-12171

Add a script right to manage script macro execution permissions

    Details

    • Tests:
      Unit
    • Difficulty:
      Unknown
    • Similar issues:

      Description

      Currently, a user with an "edit" right can write both regular content and scripts. There is no restriction on what scripts a user with an "edit" right can write/execute, except maybe for the "programming" right which limits only which API level they can use in their scripts.

      In practice, however, there sometimes comes the need to not allow regular users (with just an "edit" right) to write executable scripts and only allow them to write regular wiki content.

      For this, the proposal is to introduce a new "script" right that extracts that responsibility from the "edit" right and offers more granularity in managing permissions.

      In practice, a user with an "edit" right will be able to write both content and scripts, however, he will also need the "script" right in order for the scripts he wrote (using the "edit" right) to be executable.

      Put the other way, the scripts inside a document are execut(able/ed) when viewing that document if the last author of the content of that document has the "script" right (much like we are doing for the "programming" right, but this affects all scripts, regardless of API level).

      To preserve backwards compatibility, the "script" right should be implied by the "edit" right by default, leaving admins the possibility to explicitly deny it for some users or groups, if they so choose to.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                enygma Eduard Moraru
                Reporter:
                enygma Eduard Moraru
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Date of First Response:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 1 week, 3 days, 6 hours
                  1w 3d 6h