Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-13296

The User profile page still manually includes the sheet

    XMLWordPrintable

    Details

    • Difficulty:
      Unknown
    • Documentation:
      N/A
    • Documentation in Release Notes:
      N/A
    • Similar issues:

      Description

      When creating a new user, the old-core XWiki.createUser(...) method still sets the user's profile document content to:

      {{include reference=\"XWiki.XWikiUserSheet\"/}}
      

      ...which, for backwards compatibility reasons, has the effect of overriding the XWikiUsers class configured sheet and rendering the specified sheet instead. In this case it is the same sheet, but rendered in a different context.

      The problem it creates is that users without script rights might not be able to view their profile since the XWikiUsersSheet document would be rendered with the rights of the user document instead of being rendered with the rights of the sheet document.

      This method is used by registration and possibly in other places as well and should have been deprecated when we`ve introduced the sheet displayers.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              enygma Eduard Moraru
              Reporter:
              enygma Eduard Moraru
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response: