Details
-
Bug
-
Resolution: Fixed
-
Critical
-
7.4
-
Unknown
-
N/A
-
N/A
-
Description
Steps to reproduce:
- Create a class: Main.MyClass
- Add 2 string properties: firstName and lastName
- Add a computed field fullName, in the script field, put:
{{velocity}} $object.display('firstName', 'view') $object.display('lastName', 'view') {{/velocity}}
- Create a sheet for that class, and add the ClassSheetBinding
- With the Administrator, create a page with an object of Main.MyClass
- Verify the sheet is correctly displayed
- With an other user, who has not the script right, edit the page and change the last name for example. Save
- The computed field is not displayed anymore:
I would expect it to work, because the script is executed by the sheet which has been saved by the administrator.
Moreover, if you put the exact same code of the displayer in the sheet, it will works, whoever saved the document last. So it's not consistent.
Attachments
Issue Links
- relates to
-
XWIKI-12171 Add a script right to manage script macro execution permissions
- Closed
-
XWIKI-12310 Set the script right default value to DENY for better flexibility
- Closed