Details
-
Bug
-
Resolution: Duplicate
-
Critical
-
None
-
7.0.1
-
Hard
-
Description
Hello,
I found a bug with right access.
I use LDAP authentication and xwiki local groups
Everyone (in LDAP directory) can read all my xwiki but only XWiki.XWikiEditeurs have write access on a space Encyclopédie.
XWiki.XWikiEditeurs contains some groups:
- XWiki.GF_PiloteM2 (XWiki.xwikilecteur user in it)
- XWiki.GF_CacP3 (XWiki.xwikilecteur user in it)
- XWiki.GF_xxx (XWiki.xwikilecteur user is NOT inside)
this sub groups contains users.
Sometimes users of XWiki.GF_PiloteM2 and XWiki.GF_CacP3 lose write access on Encyclopédie (I didn't found the cause).
When this happen, I found a way to fix this write access problem:
I simply remove XWiki.xwikilecteur from a subgroup AND I replace him in same subgroups!!!
It is clearely a bug, isn't it?
XWiki.xwikilecteur is in this groups:
- GF_PiloteM2
- GF_CacP3
- XWikiAllGroup
and Encyclopédie space have this right access:
- XWikiAllGroup: read/comment
- XWikiEditeurs : read/comment/write
XWikiEditeursEffac: read/comment/write/delete
Thxs.
Attachments
Issue Links
- duplicates
-
XWIKI-13574 Group nesting that build a network (not a simple tree) are not properly cached for security checks
- Closed
- is duplicated by
-
XWIKI-13249 XE 7.4.1 Global groups inside Local groups
- Closed
- relates to
-
XWIKI-13574 Group nesting that build a network (not a simple tree) are not properly cached for security checks
- Closed