Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-16480

parseGroovyFromPage does not use the target page's programming rights

    XMLWordPrintable

    Details

    • Tests:
      Unit
    • Difficulty:
      Unknown
    • Documentation:
      N/A
    • Documentation in Release Notes:
      N/A
    • Similar issues:

      Description

      It appears that using xwiki.parseGroovyFrom page in velocity to create a groovy object to work with ignores the programming rights of the groovy page.

      I discovered this by using configurationSheet: the call works when using /view/ but fails when using /admin/; this is a call to `services.component.getInstance(Class.forName("org.xwiki.configuration.ConfigurationSource"), "xwikicfg")`. This can be measured with simply `services.components` which returns a script-oriented object.

        Attachments

          Activity

            People

            Assignee:
            tmortagne Thomas Mortagne
            Reporter:
            polx Paul Libbrecht
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: