Details
-
Bug
-
Resolution: Fixed
-
Major
-
2.0, 1.9.4
-
None
-
Unknown
-
Description
Here is a patch from Caleb James DeLisle
Index: core/xwiki-core/src/main/java/com/xpn/xwiki/api/Document.java =================================================================== --- core/xwiki-core/src/main/java/com/xpn/xwiki/api/Document.java (revision 24291) +++ core/xwiki-core/src/main/java/com/xpn/xwiki/api/Document.java (working copy) @@ -2050,7 +2050,11 @@ */ public void rename(String newDocumentName, List<String> backlinkDocumentNames) throws XWikiException { - this.doc.rename(newDocumentName, backlinkDocumentNames, getXWikiContext()); + if (hasAccessLevel("delete") + && this.context.getWiki().checkAccess("edit", + this.context.getWiki().getDocument(newDocumentName, this.context), this.context)) { + this.doc.rename(newDocumentName, backlinkDocumentNames, getXWikiContext()); + } } /**
Attachments
Issue Links
- is duplicated by
-
XWIKI-2783 Privil3g3 escalation while renaming a page for Girliz
- Closed