Hi devs,

Right now if you enable xwiki.authentication.group.allgroupimplicit
any user from any wiki will be part of any XWiki.XWikiAllgroup group
from any wiki.

I think this is wrong, for me
xwiki.authentication.group.allgroupimplicit is supposed to have the
same behavior as if it was disabled except that it allows to avoid
loading a potentially huge group just to check if the user is in it.

So I propose to also compare the user and group wiki and not just
check that the group has space "XWiki" and name "XWikiAllGroup".

WDYT ?

-- 
Thomas Mortagne
_______________________________________________
devs mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/devs

Reply via email to