[EMAIL PROTECTED] wrote:
>> hello,
>> I would like to write some scripts which do some more complex SQL
>> extraction
>> requests using for example $xwiki.search(sql)... no modif of the DB, just
>> extraction for presentation... I would prefer not to be forced to code a
>> new
>> Java module just for this...
>>
>> But this function is protected by programming rights...
>> So I must give programming rights to allow people to view this page... I
>> find a bit disturbing because programming rights have a "sensitive"
>> meaning
>> in my head...
>>
>>     
>
>  I really think, that concept of programming right in xwiki is fundamental
> flaw: evaluation of program is not programming.
>
> So, I just usually grant programming rights to everyone.
>
> Imho, if we want to fix this, than 'check programming right' in plugins
> must be applied not to user of page, but to page author, on which called
> function is situated.  (I plan switch to such semantics in next release of
> xwikisql)
>   

That is the case already ! The only thing you have to take care of is 
that "regular users" (without programming rights) do not edit pages that 
needs to be saved with this programming right. To do this, the best 
practice is to write the code in a protected space (like XWiki/), where 
such regular users cannot edit, and to include that code from the target 
document (in space Main/ or any other space). This way, if somebody does 
edit the target document, the code that needs programming rights will 
continue to work for everybody.

Jerome.
>
>   
>> What's your point of view about this? What's the lightest, cleverest and
>> fairest way to allow this? Any advice? :)
>>
>> regards
>> Pascal
>> _______________________________________________
>> devs mailing list
>> devs@xwiki.org
>> http://lists.xwiki.org/mailman/listinfo/devs
>>
>>     
>
>
> _______________________________________________
> devs mailing list
> devs@xwiki.org
> http://lists.xwiki.org/mailman/listinfo/devs
>   

_______________________________________________
devs mailing list
devs@xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs

Reply via email to