Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-12570

Access right doesn't work well with subgroups

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Critical
    • Resolution: Duplicate
    • Affects Version/s: 7.0.1
    • Fix Version/s: None
    • Component/s: Security
    • Labels:
    • Difficulty:
      Hard
    • Similar issues:

      Description

      Hello,
      I found a bug with right access.

      I use LDAP authentication and xwiki local groups
      Everyone (in LDAP directory) can read all my xwiki but only XWiki.XWikiEditeurs have write access on a space Encyclopédie.

      XWiki.XWikiEditeurs contains some groups:

      • XWiki.GF_PiloteM2 (XWiki.xwikilecteur user in it)
      • XWiki.GF_CacP3 (XWiki.xwikilecteur user in it)
      • XWiki.GF_xxx (XWiki.xwikilecteur user is NOT inside)
        this sub groups contains users.

      Sometimes users of XWiki.GF_PiloteM2 and XWiki.GF_CacP3 lose write access on Encyclopédie (I didn't found the cause).
      When this happen, I found a way to fix this write access problem:
      I simply remove XWiki.xwikilecteur from a subgroup AND I replace him in same subgroups!!!
      It is clearely a bug, isn't it?

      XWiki.xwikilecteur is in this groups:

      • GF_PiloteM2
      • GF_CacP3
      • XWikiAllGroup

      and Encyclopédie space have this right access:

      • XWikiAllGroup: read/comment
      • XWikiEditeurs : read/comment/write
        XWikiEditeursEffac: read/comment/write/delete

      Thxs.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              softec Denis Gervalle
              Reporter:
              Pbas Pascal BASTIEN
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response: