Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-12310

Set the script right default value to DENY for better flexibility

    XMLWordPrintable

Details

    • Unknown

    Description

      As described here, the current implementation is a bit limited when trying to have a certain usecase.

      Making the right DENY by default will allows us more flexibility, given our current security module's implementation. See here for details on what this means.

      Attachments

        Issue Links

          depends on

          New Feature - A new feature of the product, which has yet to be developed. XWIKI-12171 Add a script right to manage script macro execution permissions

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-12306 A custom displayer should be executed in the security context of the document where it is located

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-12361 Replace the usage of getRenderedContent with the more flexible and secure display script service

          • Major - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-13057 Computed fields display errors when the last document author has not the script right

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-12447 Skin resources are evaluated with the rights of the current document

          • Major - Major loss of function.
          • Closed

          Activity

            People

              enygma Eduard Moraru
              enygma Eduard Moraru
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 2 days, 6 hours
                  2d 6h