[ 
https://issues.apache.org/jira/browse/JSPWIKI-1067?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16420899#comment-16420899
 ] 

ASF subversion and git services commented on JSPWIKI-1067:
----------------------------------------------------------

Commit 28489c5c43a8cfa74fc4aa1ac669daa9b67d37b5 in jspwiki's branch 
refs/heads/master from juanpablo
[ https://gitbox.apache.org/repos/asf?p=jspwiki.git;h=28489c5 ]

JSPWIKI-1039 / JSPWIKI-1067: ACLs are not taken into account when cache is 
disabled / View-only ACLs are not enforced


> View-only ACLs are not enforced
> -------------------------------
>
>                 Key: JSPWIKI-1067
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-1067
>             Project: JSPWiki
>          Issue Type: Bug
>          Components: Authentication & Authorization
>    Affects Versions: 2.10.3
>            Reporter: Harvey Echain
>            Priority: Major
>
> Group AllUsers being User1,User2
> for a page that contains
> [{ALLOW view AllUsers}]
> [{ALLOW edit User1}]
> when User2 displays this page for the first time, there is not 'Edit' button 
> and he cannot edit the page (as intended).
> Press reload, and 'Edit' button appears. User2 can now edit the page.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to