Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-21311

Introduce a required rights analyzer

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Fixed
    • Major
    • 15.9-rc-1
    • 15.7
    • Security
    • None
    • Unit, Integration
    • Unknown

    Description

      See https://forum.xwiki.org/t/a-content-analysis-based-approach-for-required-rights/13094

      Introduce an analyzer to detect the rights required by a document from its content and a user.

      When user editing (or trying to edit) a document leads to a change in the required rights, a warning message is diplayed.

      Attachments

        Issue Links

          blocks

          Security - Security bug with confidential level XWIKI-20331 RCE payloads stored in comments and profile are executed when admin user edits them.

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          causes

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-21798 The url to required rights entities are always the current page

          • Major - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-21308 No warning when an in-place field from a page belonging to an extension is edited

          • Major - Major loss of function.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-21309 No warning when rollbacking a page belonging to an extension

          • Major - Major loss of function.
          • Open

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-20907 Introduce the notion of required rights

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-21310 Generalize on the pre-edit document check

          • Major - Major loss of function.
          • Closed

          Activity

            People

              MichaelHamann Michael Hamann
              mleduc Manuel Leduc
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: