Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-22450

The navigation panel configuration isn't applied when a user without access to the configuration accessed it

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • None
    • 16.6.0
    • Panels
    • None
    • Unknown

    Description

      Steps to reproduce:

      1. As admin user, grant view right to the admin group in the PanelsCode space
      2. As a guest user, access any page of the wiki that hasn't been recently viewed, like the Sandbox
      3. Access the same page as admin user.

      Expected result:

      The navigation panel is displayed as always, excluding top-level extension pages.

      Actual result:

      The navigation panel doesn't take its configuration into account and displays all pages including top-level extension pages.

      Note: While the described setup might be artificial, this bug can also be reproduced in a setup where view right was denied globally for guests and then granted again on many individual UI elements like the document tree macro and the Panels space but not the PanelsCode space in order to grant guests access to the general UI and a few content pages.

      Attachments

        Activity

          People

            Unassigned Unassigned
            MichaelHamann Michael Hamann
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: