Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-19880

Subwiki created from flavor have the wrong pages author when the instance contains XAR extensions installed on root namespace

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Critical
    • 14.7-rc-1, 14.4.4, 13.10.9
    • 14.4.1
    • Administration, Wiki
    • None
    • Windows 11, XWiki 14.4.1 with MySQL 8.0 and Standard, Edge 102
    • Unknown
    • N/A
    • N/A

    Description

      Preconditions: A simple wiki with default settings is created with a User that has Wiki creation rights.

      Steps to reproduce:

      1. Access a subwiki as owner
      2. Go to Administration > Wikis > Descriptor 
      3. Select another Owner 
      4. Save the page
      5. Refresh the page 
      6. Login with the new Wiki owner 
      7. Go to the Wiki's administration page

       

      Expected results: The new owner has Admin rights on the Wiki.

      Actual results: After changing the owner of the subwiki neither the old or new owner has access rights to the Administration of that subwiki. Also, on all the pages errors can be seen by both users.

       

      Working on XWiki 13.10.6

      In XWiki console

      subwikiuser01:XWiki.XWikiUserPreferencesSheet^XWiki.UIExtensionClass[0]]: WikiComponentException: Registering UI extensions at wiki level requires wiki administration rights
      2022-06-24 12:52:27,987 [com.xpn.xwiki.internal.WikiInitializerJob@2facd19e([initialization, wiki, subwikiuser01])] WARN  onentManagerEventListenerProxy - Unable to register the component associated to [Object subwikiuser01:XWiki.XWikiUserProfileSheet^XWiki.UIExtensionClass[0]]: WikiComponentException: Registering UI extensions at wiki level requires wiki administration rights
      2022-06-24 12:52:28,081 [com.xpn.xwiki.internal.WikiInitializerJob@2facd19e([initialization, wiki, subwikiuser01])] INFO  a.i.BridgeAuthorizationManager - [admin] access has been denied for user [xwiki:XWiki.user01] on [subwikiuser01]: security checkpoint
      2022-06-24 12:52:28,089 [com.xpn.xwiki.internal.WikiInitializerJob@2facd19e([initialization, wiki, subwikiuser01])] ERROR cumentTranslationBundleFactory - Failed to register translation bundle from document [subwikiuser01:AnnotationCode.Translations]
      org.xwiki.security.authorization.AccessDeniedException: Access denied when checking [admin] access to [Wiki subwikiuser01] for user [xwiki:XWiki.user01]
              at org.xwiki.security.authorization.DefaultAuthorizationManager.checkAccess(DefaultAuthorizationManager.java:104)
              at org.xwiki.security.authorization.internal.BridgeAuthorizationManager.checkAccess(BridgeAuthorizationManager.java:53)
              at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory.checkRegistrationAuthorization(DocumentTranslationBundleFactory.java:442)
              at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory.registerTranslationBundle(DocumentTranslationBundleFactory.java:418)
              at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory.loadTranslations(DocumentTranslationBundleFactory.java:233)
              at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory$2.onEvent(DocumentTranslationBundleFactory.java:177)
              at org.xwiki.observation.internal.DefaultObservationManager.notify(DefaultObservationManager.java:320)
              at org.xwiki.observation.internal.DefaultObservationManager.notify(DefaultObservationManager.java:285)
              at com.xpn.xwiki.internal.WikiInitializerJob.runInternal(WikiInitializerJob.java:120)
              at org.xwiki.job.AbstractJob.runInContext(AbstractJob.java:243)
              at org.xwiki.job.AbstractJob.run(AbstractJob.java:220)
              at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
              at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
              at java.base/java.lang.Thread.run(Thread.java:834)
      2022-06-24 12:52:28,091 [com.xpn.xwiki.internal.WikiInitializerJob@2facd19e([initialization, wiki, subwikiuser01])] INFO  a.i.BridgeAuthorizationManager - [admin] access has been denied for user [xwiki:XWiki.user01] on [subwikiuser01]: security checkpoint
      2022-06-24 12:52:28,092 [com.xpn.xwiki.internal.WikiInitializerJob@2facd19e([initialization, wiki, subwikiuser01])] ERROR cumentTranslationBundleFactory - Failed to register translation bundle from document [subwikiuser01:AppWithinMinutes.Translations]
      org.xwiki.security.authorization.AccessDeniedException: Access denied when checking [admin] access to [Wiki subwikiuser01] for user [xwiki:XWiki.user01]
              at org.xwiki.security.authorization.DefaultAuthorizationManager.checkAccess(DefaultAuthorizationManager.java:104)
              at org.xwiki.security.authorization.internal.BridgeAuthorizationManager.checkAccess(BridgeAuthorizationManager.java:53)
              at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory.checkRegistrationAuthorization(DocumentTranslationBundleFactory.java:442)
              at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory.registerTranslationBundle(DocumentTranslationBundleFactory.java:418)
              at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory.loadTranslations(DocumentTranslationBundleFactory.java:233)
              at org.xwiki.localization.wiki.internal.DocumentTranslationBundleFactory$2.onEvent(DocumentTranslationBundleFactory.java:177)
              at org.xwiki.observation.internal.DefaultObservationManager.notify(DefaultObservationManager.java:320)
              at org.xwiki.observation.internal.DefaultObservationManager.notify(DefaultObservationManager.java:285)
              at com.xpn.xwiki.internal.WikiInitializerJob.runInternal(WikiInitializerJob.java:120)
              at org.xwiki.job.AbstractJob.runInContext(AbstractJob.java:243)
              at org.xwiki.job.AbstractJob.run(AbstractJob.java:220)
              at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
              at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
              at java.base/java.lang.Thread.run(Thread.java:834)
      2022-06-24 13:01:24,487 [qtp2073707154-332 - http://localhost:8080/xwiki/wiki/subwikiuser01/loginsubmit/XWiki/XWikiLogin] WARN  nticationFailureLoggerListener - Authentication failure with login [gabriela]
      

      Attachments

        1. AdminNewOwner.jpg
          262 kB
          Gabriela Anechitoaei
        2. AfterPageRefresh.jpg
          226 kB
          Gabriela Anechitoaei
        3. CurrentOwner.jpg
          156 kB
          Gabriela Anechitoaei
        4. NewOwner.jpg
          137 kB
          Gabriela Anechitoaei
        5. Owner.jpg
          146 kB
          Gabriela Anechitoaei
        6. OwnerChangedToAdmin.jpg
          125 kB
          Gabriela Anechitoaei
        7. Owners.jpg
          71 kB
          Gabriela Anechitoaei

        Issue Links

          Activity

            People

              tmortagne Thomas Mortagne
              ganechitoaei Gabriela Anechitoaei
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: