Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-17703

The right to like on XWikiAllGroup allows you to see all pages

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: 12.7-rc-1
    • Fix Version/s: 12.7
    • Component/s: Administration
    • Labels:
    • Tests:
      Unit
    • Difficulty:
      Unknown
    • Documentation:
      N/A
    • Documentation in Release Notes:
      N/A
    • Similar issues:

      Description

      I have set xwiki.authentication.group.allgroupimplicit=1 and removed all xobjects from the xwikiallgroup. Now today every user can see every site, regardless of the rights. (Not the admin parts. They are still hidden.)

      In our default settings the XWikiAllGroup can view and comment every page. When needed, we remove the rights from spaces\pages to hide things. That does not work anymore.

      In the picture: The rights - and XWikiAll can still see the pages\children.

        Attachments

          Activity

            People

            Assignee:
            surli Simon Urli
            Reporter:
            jwielsch Johannes Wielsch
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Date of First Response: