Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-17891

When the Program access right is globally set. The user can access all xwiki pages also where access is not allowed.

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Won't Fix
    • Affects Version/s: 11.10.10
    • Fix Version/s: None
    • Component/s: Security
    • Labels:
      None
    • Difficulty:
      Unknown
    • Similar issues:

      Description

      When the Program access right is globally set.

      The user can access all xwiki pages also where access is not allowed.

      Reproduce via:

      Don't allow a user access on a specific xwiki page.
      This will show: You are not allowed to view this page or perform this action.
      Allow global: Program rights.

      The page the wasn't allowed before can now be accessed.

        Attachments

          Activity

            People

            Assignee:
            tmortagne Thomas Mortagne
            Reporter:
            jb-cd Joop Boonen
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Date of First Response: