On Thu, Feb 23, 2012 at 18:24, Vincent Massol <[email protected]> wrote:
> I'd also prefer to force using the superadmin user in an empty wiki and
> don't give any rights by default to the guest user.
>
Great to hear that, since this is exactly what the new implementation I
propose do !
By the way, you miss the fact that this is not the guest user, but a null
user when the wiki is empty, something even worse IMO.
The new implementation does not give any right to anyone called null.
> What Thomas raised was only for consistency indeed.
>
> I personally needed to write a test in an empty wiki where I needed to
> delete a page. Here's what I tried:
> * Deleting the page with guest lead to the Login page
> * Registering a user and trying to delete the page with it leads to a
> permission error ("you don't have the permission blah blah")
>
> What I'm doing now is log with the superadmin user which I guess is the
> best in the end.
>
> The alternative is to register a user and explicitly give it the delete
> right or make it admin.
>
> Back to the VOTE, I agree that it's not good to implement and I'm also -1
> now since it would cause changes to existing wikis as Denis and Thomas
> explained.
>
> Thanks
> -Vincent
>
> On Feb 23, 2012, at 6:13 PM, Andreas Jonsson wrote:
>
> > -1
> >
> > As I see it, it is the fact that admin right is allowed by default that
> > is an irregularity. Currently, the initial import relies on these
> > default admin rights, and it is expected that the imported contents
> > configure the admin right appropriately.
>
I fully agree with Andreas, this open the wiki to risks for just an initial
special case.
> >
> > In a standard wiki-setting, I would expect that "delete", "admin", and
> > "programming" are denied to most users and it seems to me natural that
> > the default is "deny" for these. So if this is a matter of consistency,
> > I would rather see a new mechanism (e.g., a special "uninitialized"
> > state of the wiki) to make it possible to change the default to "deny"
> > also for admin rights.
> >
> > Best Regards,
> >
> > Andreas
> >
> > 2012-02-23 16:02, Thomas Mortagne skrev:
> >> Right now on an empty wiki you have all the rights except "delete"
> >> (and register).
> >>
> >> So this means that you have "admin" right but you don't have "delete"
> rights...
> >>
> >> This does not make much sense and I anyway I don't see why delete has
> >> this special rule.
> >>
> >> Any idea ?
> >>
> >> Here is my +1 to remove the special handling of "delete" default right.
> >>
> >
> > _______________________________________________
> > devs mailing list
> > [email protected]
> > http://lists.xwiki.org/mailman/listinfo/devs
>
> _______________________________________________
> devs mailing list
> [email protected]
> http://lists.xwiki.org/mailman/listinfo/devs
>
--
Denis Gervalle
SOFTEC sa - CEO
eGuilde sarl - CTO
_______________________________________________
devs mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/devs
