Details
-
Bug
-
Resolution: Solved By
-
Critical
-
5.0
-
High
-
Unknown
-
Description
Steps to reproduce:
- Login with Admin
- Create a new nested page under Sandbox (P1)
- Go to P1 and allow View rights for page and children only for XWikiAdminGroup
- Create a new simple user (U1)
- Login as U1
- Create a new terminal page under Sandbox using the same name as P1 (P2)
- Go to Page Index and filter for P1
- Click on Delete for P1, the nested page for which you don't even have View rights
- Expand "Affects children" -> you see an empty livetable. Most probably it should list the page WebPreferences, for which you don't have View rights
- Click "Yes, please delete this page" -> You get an error saying: "You are not allowed to view this page or perform this action."
- Go to Page Index and filter for P1 -> P1 is not displayed in the livetable, since it was deleted by U1
This issue is not the same as XWIKI-13341, since for my usecase U1 is not the creator of P1.
Attachments
Issue Links
- duplicates
-
XWIKI-18983 Regular users cannot move or delete anymore a page created by them which has been converted to terminal
-
- Closed
-
- is duplicated by
-
XWIKI-14074 Hide Actions from Page Index if the current user doesn't have the right to perform them
-
- Closed
-
- links to