Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-18238

ProgrammingRightCheckerListener is not actualy doing what it's supposed to

    XMLWordPrintable

    Details

    • Difficulty:
      Unknown
    • Documentation:
      N/A
    • Documentation in Release Notes:
      N/A
    • Similar issues:

      Description

      ProgrammingRightCheckerListener is using dropPermissions() which cause two important problems:

      • dropPermissions() actually covers way more than PR right now for all the script classes extending com.xpn.xwiki.api.Document (for example impossible to use Document#saveAsAuthor with it)
      • dropPermissions() is not really part of the security module, so it's not taken into account at all when you directly use AuthorizationManager

        Attachments

          Activity

            People

            Assignee:
            tmortagne Thomas Mortagne
            Reporter:
            tmortagne Thomas Mortagne
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: