Details
-
New Feature
-
Resolution: Unresolved
-
Major
-
None
-
5.1-milestone-2
-
None
-
Unknown
-
Awaiting Committer feedback
-
Description
Right now, there is no way to restrict the use of some objects to privileged users. From a security point of view, it would be nice to have a way to let only some users add or edit objects from a defined list of classes. For example it would enable us to restrict the use of JavascriptSkinExtension to a subset of trusted users.
Attachments
Issue Links
- blocks
-
XWIKI-9119 JavaScriptExtension enables any user with edit right to execute any script he wants
- Closed
- links to