Hi Victor, See my reply to your initial mail.
Generally speaking, you should probably store your data in wiki pages or spaces and apply the proper rights. If view rights are also restricted to users and using the web API to retrieve the data becomes, use a service instead that will retrieve the data and perform additional rights checks if necessary. Thanks, Eduard On Tue, Nov 18, 2014 at 2:40 PM, Thomas Mortagne <[email protected]> wrote: > On Tue, Nov 18, 2014 at 11:34 AM, Victor Rachieru > <[email protected]> wrote: > > Hei devs, > > > > I'm looking for the best way to associate certain information for a user > > that others (except the user himself and maybe admins) should not be able > > to modify. > > > > This is a general issue which applies in numerous cases but at the > moment I > > need it to store the ratings for extensions in the repository app (more > > here: http://xwiki.markmail.org/message/k7gwpnrx77vxtfrk) > > > > A way that I see this working would be to use a document as an editor to > > which we feed the actual page where the information is stored. > > The edition of the information contained within the documents would only > be > > possible through the editor page giving more control over who and what > can > > edit. The visualization of the content pages would be available to > anyone. > > Ideally for this we would need to kind of have a special "inline > right" that allow to edit the document only trough inline editor. > > > > > There are a few other suggestions described in this design proposal: > > > http://design.xwiki.org/xwiki/bin/view/Proposal/Extensionrepositoryratings#H1.Storetheratingssomewherenobody28exceptadmins29canmodifyit > > > > What do you guys think is the best approach for storing data so that it's > > safe from alteration by unwanted users? > > This issue is a blocker for the implementation of the ratings feature so > > please state your opinion so that we can make a decision. > > > > > > Thanks, > > Victor > > _______________________________________________ > > devs mailing list > > [email protected] > > http://lists.xwiki.org/mailman/listinfo/devs > > > > -- > Thomas Mortagne > _______________________________________________ > devs mailing list > [email protected] > http://lists.xwiki.org/mailman/listinfo/devs > _______________________________________________ devs mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/devs
