Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-8581

The local admin of a subwiki should not be allowed to alter the index of entities outside that subwiki

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 4.3
    • Fix Version/s: 4.5.1
    • Component/s: Search - Solr
    • Labels:
      None
    • Tests:
      Unit
    • Difficulty:
      Unknown
    • Documentation:
      N/A
    • Documentation in Release Notes:
      N/A
    • Similar issues:

      Description

      The Solr index script service should always verify that the wiki of each of the entities that are about to be indexed by a user is a wiki where that user has admin rights, otherwise fail the operation.

      This also needs to be reflected in the Solr Search Admin UI by always showing one (current) wiki when viewed from a subwiki and all the wikis when viewed from the main wiki.

        Attachments

          Activity

            People

            • Assignee:
              enygma Eduard Moraru
              Reporter:
              enygma Eduard Moraru
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: