Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-19880

Subwiki created from flavor have the wrong pages author when the instance contains XAR extensions installed on root namespace

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Critical
    • 14.7-rc-1, 14.4.4, 13.10.9
    • 14.4.1
    • Administration, Wiki
    • None
    • Windows 11, XWiki 14.4.1 with MySQL 8.0 and Standard, Edge 102
    • Unknown
    • N/A
    • N/A

    Description

      Preconditions: A simple wiki with default settings is created with a User that has Wiki creation rights.

      Steps to reproduce:

      1. Access a subwiki as owner
      2. Go to Administration > Wikis > Descriptor 
      3. Select another Owner 
      4. Save the page
      5. Refresh the page 
      6. Login with the new Wiki owner 
      7. Go to the Wiki's administration page

       

      Expected results: The new owner has Admin rights on the Wiki.

      Actual results: After changing the owner of the subwiki neither the old or new owner has access rights to the Administration of that subwiki. Also, on all the pages errors can be seen by both users.

       

      Working on XWiki 13.10.6

      In XWiki console

      subwikiuser01:XWiki.XWikiUserPreferencesSheet^XWiki.UIExtensionClass[0]]: WikiComponentException: Registering UI extensions at wiki level requires wiki administration rights
2022-06-24 12:52:27,987 [com.xpn.xwiki.internal.WikiInitializerJob@2facd19e([initialization, wiki, subwikiuser01])] WARN  onentManagerEventListenerProxy - Unable to register the component associated to [Object subwikiuser01:XWiki.XWikiUserProfileSheet^XWiki.UIExtensionClass[0]]: WikiComponentException: Registering UI extensions at wiki level requires wiki administration rights
2022-06-24 12:52:28,081 [com.xpn.xwiki.internal.WikiInitializerJob@2facd19e([initialization, wiki, subwikiuser01])] INFO  a.i.BridgeAuthorizationManager - [admin] access has been denied for user [xwiki:XWiki.user01] on [subwikiuser01]: security checkpoint
2022-06-24 12:52:28,089 [com.xpn.xwiki.internal.WikiInitializerJob@2facd19e([initialization, wiki, subwikiuser01])] ERROR cumentTranslationBundleFactory - Failed to register translation bundle from document [subwikiuser01:AnnotationCode.Translations]
org.xwiki.security.authorization.AccessDeniedException: Access denied when checking [admin] access to [Wiki subwikiuser01] for user [xwiki:XWiki.user01]
        at org.xwiki.security.authorization.DefaultAuthorizationManager.checkAccess(DefaultAuthorizationManager.java:104)
        at org.xwiki.security.authorization.internal.BridgeAuthorizationManager.checkAccess(BridgeAuthorizationManager.java:53)
        at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory.checkRegistrationAuthorization(DocumentTranslationBundleFactory.java:442)
        at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory.registerTranslationBundle(DocumentTranslationBundleFactory.java:418)
        at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory.loadTranslations(DocumentTranslationBundleFactory.java:233)
        at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory$2.onEvent(DocumentTranslationBundleFactory.java:177)
        at org.xwiki.observation.internal.DefaultObservationManager.notify(DefaultObservationManager.java:320)
        at org.xwiki.observation.internal.DefaultObservationManager.notify(DefaultObservationManager.java:285)
        at com.xpn.xwiki.internal.WikiInitializerJob.runInternal(WikiInitializerJob.java:120)
        at org.xwiki.job.AbstractJob.runInContext(AbstractJob.java:243)
        at org.xwiki.job.AbstractJob.run(AbstractJob.java:220)
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
        at java.base/java.lang.Thread.run(Thread.java:834)
2022-06-24 12:52:28,091 [com.xpn.xwiki.internal.WikiInitializerJob@2facd19e([initialization, wiki, subwikiuser01])] INFO  a.i.BridgeAuthorizationManager - [admin] access has been denied for user [xwiki:XWiki.user01] on [subwikiuser01]: security checkpoint
2022-06-24 12:52:28,092 [com.xpn.xwiki.internal.WikiInitializerJob@2facd19e([initialization, wiki, subwikiuser01])] ERROR cumentTranslationBundleFactory - Failed to register translation bundle from document [subwikiuser01:AppWithinMinutes.Translations]
org.xwiki.security.authorization.AccessDeniedException: Access denied when checking [admin] access to [Wiki subwikiuser01] for user [xwiki:XWiki.user01]
        at org.xwiki.security.authorization.DefaultAuthorizationManager.checkAccess(DefaultAuthorizationManager.java:104)
        at org.xwiki.security.authorization.internal.BridgeAuthorizationManager.checkAccess(BridgeAuthorizationManager.java:53)
        at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory.checkRegistrationAuthorization(DocumentTranslationBundleFactory.java:442)
        at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory.registerTranslationBundle(DocumentTranslationBundleFactory.java:418)
        at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory.loadTranslations(DocumentTranslationBundleFactory.java:233)
        at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory$2.onEvent(DocumentTranslationBundleFactory.java:177)
        at org.xwiki.observation.internal.DefaultObservationManager.notify(DefaultObservationManager.java:320)
        at org.xwiki.observation.internal.DefaultObservationManager.notify(DefaultObservationManager.java:285)
        at com.xpn.xwiki.internal.WikiInitializerJob.runInternal(WikiInitializerJob.java:120)
        at org.xwiki.job.AbstractJob.runInContext(AbstractJob.java:243)
        at org.xwiki.job.AbstractJob.run(AbstractJob.java:220)
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
        at java.base/java.lang.Thread.run(Thread.java:834)
2022-06-24 13:01:24,487 [qtp2073707154-332 - http://localhost:8080/xwiki/wiki/subwikiuser01/loginsubmit/XWiki/XWikiLogin] WARN  nticationFailureLoggerListener - Authentication failure with login [gabriela]

      Attachments

        1. AdminNewOwner.jpg
          262 kB
          Gabriela Anechitoaei
        2. AfterPageRefresh.jpg
          226 kB
          Gabriela Anechitoaei
        3. CurrentOwner.jpg
          156 kB
          Gabriela Anechitoaei
        4. NewOwner.jpg
          137 kB
          Gabriela Anechitoaei
        5. Owner.jpg
          146 kB
          Gabriela Anechitoaei
        6. OwnerChangedToAdmin.jpg
          125 kB
          Gabriela Anechitoaei
        7. Owners.jpg
          71 kB
          Gabriela Anechitoaei

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-20059 Creating a subwiki with a flavor depending on the standard subwiki flavor with custom XWikiPreferences raises conflict error

          • Major - Major loss of function.
          • Closed
          depends on

          Improvement - An improvement or enhancement to an existing feature or task. XCOMMONS-2491 Allow accessing the current extension session

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          is related to

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-19651 Introduce the gallery attachment picker macro

          • Major - Major loss of function.
          • Closed

          Activity

            People

              tmortagne Thomas Mortagne
              ganechitoaei Gabriela Anechitoaei
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: