Details
-
Bug
-
Resolution: Fixed
-
Major
-
2.0.1
-
None
-
Unknown
-
N/A
-
N/A
-
Description
Right now, an user can have the edit right on a page without having the view right.
This is a bit weird since when an user has the edit right he can access the contents of the page provided he knows the URL.
Thus I think that the "View" right should be automatically inherited from the "Edit" right: if an user can edit a page he should automatically be allowed to view it.
This can cause some issues: for instance, since the Office Importer relies on a check to see whether an user has edit rights on the target page, an user can use the Office Importer to import a document using the Office Importer and create that document in a space that the user cannot access in view mode.