Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-23953

Guest user can import a XAR through the /wikis/{wikiName} REST endpoint

    XMLWordPrintable

Details

    • Integration
    • Unknown
    • N/A
    • N/A

    Description

      The refactoring in XWIKI-21071 inadvertently removed the code which was indirectly checking if the context user has admin right.

      While all the wiki pages will be saved with guest as author, it would also be possible to import a XWiki.XWikiPreferences page which give the guest user programming right.

      Attachments

        Issue Links

          is caused by

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-21071 'Import a XAR in a wiki' REST API is not working as expected when "backup=true" and "history=REPLACE"

          • Major - Major loss of function.
          • Closed
          links to

          Web Link Security Advisory

          Activity

            People

              tmortagne Thomas Mortagne
              tmortagne Thomas Mortagne
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: