On Thu, Sep 26, 2013 at 3:19 PM, Denis Gervalle <[email protected]> wrote: > Hi Guillaume, > > IMO the XWiki.Admin user should not be any where, in any package since this > could cause more trouble than it solve, like leaving an admin account > unsecured, resetting password of the admin account, etc... > > IMO, this is the job of the DW to propose the creation of an admin account > when appropriate and securing it properly immediately. > > So, if you go for this change, I think removing it would not require more > work, apart from the DW adaptation and it could be adapted depending of the > usage (workspace or farm). > WDYT ?
Sure ideally that's what should be done, I would put +1 if I was not going to be the one that will have to do it ;) > > > > On Thu, Sep 26, 2013 at 3:05 PM, Guillaume "Louis-Marie" Delhumeau < > [email protected]> wrote: > >> Issue : >> * Since XWiki.Admin is packaged in xwiki-platform-administration-ui, it >> comes with xwiki-enterprise-ui-wiki (which is the subwiki default UI). >> * XWiki.Admin is a member of XWiki.XWikiAdminGroup and XWiki.XWikiAllGroup, >> which are also bundled in xwiki-platform-administration-ui. >> * WorkspaceManager.Install removes XWiki.Admin from workspacetemplate, in >> order to not have local admin in new workspaces. >> * When we upgrade subwikis, DW does not install XWiki.Admin (DW is aware >> that the user has been intentionally removed), but the merge of >> XWiki.XWikIAllGroup does no work well : it add XWiki.Admin to the group. >> * That leads us to: http://jira.xwiki.org/browse/XWIKI-9501 (The local >> admin does not exist, but she is a member of XWiki.XWikiAllGroup). >> >> + I think the WorkspaceManager.Install trick is not clean. >> >> My proposal is to *move XWiki.Admin to XE mainwiki*. >> >> But it breaks the *functional tests* that needs to *log-in as *an admin. It >> can be solved by using the *superadmin*! >> >> + When DW does the first install, it should use superadmin too, so all >> default macros come with the rights of superadmin. >> >> Here is my +1. >> >> Thanks, >> Louis-Marie >> _______________________________________________ >> devs mailing list >> [email protected] >> http://lists.xwiki.org/mailman/listinfo/devs >> > > > > -- > Denis Gervalle > SOFTEC sa - CEO > eGuilde sarl - CTO > _______________________________________________ > devs mailing list > [email protected] > http://lists.xwiki.org/mailman/listinfo/devs -- Thomas Mortagne _______________________________________________ devs mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/devs
