Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-4491

The "Edit" right should imply the "View" right

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.0.1
    • Fix Version/s: 5.0-milestone-2
    • Component/s: Old Core, Security
    • Labels:
      None
    • Difficulty:
      Unknown
    • Documentation:
      N/A
    • Documentation in Release Notes:
      N/A
    • Similar issues:

      Description

      Right now, an user can have the edit right on a page without having the view right.

      This is a bit weird since when an user has the edit right he can access the contents of the page provided he knows the URL.

      Thus I think that the "View" right should be automatically inherited from the "Edit" right: if an user can edit a page he should automatically be allowed to view it.

      This can cause some issues: for instance, since the Office Importer relies on a check to see whether an user has edit rights on the target page, an user can use the Office Importer to import a document using the Office Importer and create that document in a space that the user cannot access in view mode.

        Attachments

          Activity

            People

            • Assignee:
              softec Denis Gervalle
              Reporter:
              wikibc Guillaume Lerouge
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Date of First Response: