Hi,
On Wed, Oct 28, 2009 at 11:30 AM, Vincent Massol <[email protected]> wrote:
>
> On Oct 28, 2009, at 11:29 AM, Vincent Massol wrote:
>
> > Ok it seems this was done by Sergiu in rev 18828 for issue
> > "XAPANELS-77: Improve class and object editor panels"
> >
> > The AddObject panel was modified to have this check:
> >
> > #foreach ($classname in $xwiki.classList)
> > #if($!xwiki.hasAccessLevel("edit", $classname))
> > ...
> >
> > Thus only Objects for which the user has edit rights on the Class
> > name are listed.
> >
> > Is that what we want? It doesn't sound quite right to me.
>
I would rather say that if the user can view the Object's Class and has edit
right on the target page he should be allowed to add that object to the
page. For instance an user might not be able to edit the BlogArticle class
yet want to add a blog article object to a page...
Looks like a regression to me.
Guillaume
> BTW that's why users on cannot add macros, plugins, etc anymore on
> code.xwiki.org I think.
>
> -Vincent
>
> >
> > Thanks
> > -Vincent
> >
> > On Oct 27, 2009, at 9:18 PM, Vincent Massol wrote:
> >
> >> Hi,
> >>
> >> I've just noticed on trunk that now non admin users can only see a
> >> few classes in the object editor: some Blog classes and the Panel
> >> Class.
> >>
> >> Is that normal? I don't remember when we decided this.
> >>
> >> Thanks
> >> -Vincent
> >>
> >
>
> _______________________________________________
> devs mailing list
> [email protected]
> http://lists.xwiki.org/mailman/listinfo/devs
>
--
Guillaume Lerouge
Product Manager - XWiki SAS
Skype: wikibc
Twitter: glerouge
http://guillaumelerouge.com/
_______________________________________________
devs mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/devs
