Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-8783

Deleted documents can be browsed and previewed by non-admins

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Blocker
    • 4.5-rc-1
    • 4.5-milestone-1
    • Index, Old Core
    • None
    • Integration
    • Unknown
    • N/A
    • N/A

    Description

      Step to reproduce :

      • Create a private space in your wiki. Private means the space should be visible to nobody but you.
      • Create documents in this space.
      • Delete the space.
      • Then the space (and all its documents) is in the bin, but since you deleted it, rights are also removed.
      • 2 issues here : the bin is public and anyone can access those documents.

      In my opinion, we should not let anyone but admins reach the bin and the documents inside too.

      Attachments

        Issue Links

          Activity

            People

              jvdrean Jean-Vincent Drean
              nlemoine Nicolas Lemoine
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: