Details
-
Bug
-
Resolution: Fixed
-
Major
-
2.0, 1.9.4
-
None
-
Unknown
-
Description
Here is a patch from Caleb James DeLisle
Index: core/xwiki-core/src/main/java/com/xpn/xwiki/api/Document.java
===================================================================
--- core/xwiki-core/src/main/java/com/xpn/xwiki/api/Document.java (revision 24291)
+++ core/xwiki-core/src/main/java/com/xpn/xwiki/api/Document.java (working copy)
@@ -2050,7 +2050,11 @@
*/
public void rename(String newDocumentName, List<String> backlinkDocumentNames) throws XWikiException
{
- this.doc.rename(newDocumentName, backlinkDocumentNames, getXWikiContext());
+ if (hasAccessLevel("delete")
+ && this.context.getWiki().checkAccess("edit",
+ this.context.getWiki().getDocument(newDocumentName, this.context), this.context)) {
+ this.doc.rename(newDocumentName, backlinkDocumentNames, getXWikiContext());
+ }
}
/**
Attachments
Issue Links
- is duplicated by
-
XWIKI-2783 Privil3g3 escalation while renaming a page for Girliz
-
- Closed
-