Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-9887

When changing the owner of a wiki, wiki owner security access rights are not updated

    Details

    • Difficulty:
      Unknown
    • Documentation:
      N/A
    • Documentation in Release Notes:
      N/A
    • Similar issues:

      Description

      Steps to reproduce:

      1. Login with Admin
      2. Create 2 global users: U1 & U2
      3. Create a new subwiki and in step 2 set U1 as the owner and U2 as a member
      4. Use DW to install the UI
      5. You'll get a merge conflict for XWiki.XWikiAllGroup: choose "Keep the current version"
      6. Hover over Home and click "Wiki Index"
      7. Click "edit" for the new subwiki
      8. Click Edit
      9. Change the subwiki's owner to U2
      10. Login with U2
      11. Hover over Wiki; you won't see the Administer Wiki link
      12. Login with U1 (the previous owner); you'll have both Administrative rights and the right to delete the wiki

      Basically the previous owner (U1) has more rights than the current one. I think U1 shouldn't have any administrative right once he's no longer the owner.

        Attachments

          Activity

            People

            • Assignee:
              softec Denis Gervalle
              Reporter:
              msmeria Manuel Smeria
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Date of First Response: