Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-2724

Allow rights should have priority over deny rights

    XMLWordPrintable

    Details

    • Similar issues:

      Description

      I didnt find this special feature in documentation. Maybe it is normal functionality, but i thing it is not right concept.

      1. user "franta" is in group "one" and in group "two"
        "One" can view all documents and "two" can view all documents except "doc1". Franta cannot view document doc1. I think he could view this document.
        The solution is not so hard: I can replace the rights only for the page doc1.
      2. user "franta" is in group "one" and in group "two"
        All groups can edit all pages. I have page "doc2". This page would edit only group "one". On the page level i denied edit right for group "two". Franta cannot edit this page because he is in group two and the denied access has bigger priority.
        Solution: I can create special group with special rights, but it is unnecessarily complicated and not transparent.

      Better solution is that allowed rights has bigger priority than denied rights. Of course the hierarchy page-space-global will not change.

      I have to solve this problem often and i think it is easier to manage rights by my way. Allow right would have priority.

        Attachments

          Activity

            People

            Assignee:
            sdumitriu Sergiu Dumitriu
            Reporter:
            vklidu Jirka Majer
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Date of First Response: