Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-9156

The Wiki UIExtensions should check the rights before executing extension points

    XMLWordPrintable

Details

    • Bug
    • Resolution: Duplicate
    • Critical
    • None
    • 5.0.1
    • UI Extension
    • None
    • Unknown

    Description

      Steps to reproduce:

      • go to the Administration:Rights section and set your wiki to private by checking "Prevent unregistered users from viewing pages, regardless of the page or space rights"
      • go on any wiki page as XWikiGuest

      Result:

      • the Quick Links panel is available and displays all its content for the XWikiGuest user although he has no view rights on it ($xwiki.hasAccessLevel('view', 'Panels.QuickLinks') is false)

      Attachments

        Issue Links

          duplicates

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-9826 Prevent unregistered users access regardless of page or space rights is not always taken into account

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-9837 Panels visible to the anonymous user even if wiki is set to prevent unregistered users from viewing pages

          • Major - Major loss of function.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-9052 Unregistered users can still see everything in the wiki even if right to view pages for Unregistered users is explicit set to deny.

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-9126 Show panel only if the user has the view right on the panel page

          • Major - Major loss of function.
          • Closed

          Activity

            People

              camil7 Clemens Robbenhaar
              oana.tabaranu Elena-Oana Florea
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: