Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-3398

Rename should check the delete right instead of edit

    XMLWordPrintable

Details

    Description

      in com.xpn.xwiki.api.Document rename does not check any rights so with no edit/delete rights on a space you can move a document to another space and probably even write in a space where you don't have rights. You can also delete the document once you have moved it to a space where you have delete rights.

      Attachments

        Activity

          People

            sdumitriu Sergiu Dumitriu
            ludovic Ludovic Dubost
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: