+1 for 1. On 10/05/2016 05:29 AM, Thomas Mortagne wrote: > Hi devs, > > Right now (and since forever) the default behavior for templates is to > be executed with the right of the current document content author > (it's not really explicit, it's just how PR works when there is no > sdoc). This means that unless you explicitly indicate an author for > your template (possible since 7.x) you don't really have any idea > which right it's going to have at runtime. It also make harder to > properly execute templates outside of main rendering thread where the > "current document" often don't really make much sense. > > I think we should make the default more stable. > > I can think of two possibilities: > > 1) with what we got right now the only real possibility is to execute > the filesystem template with superadmin right (which is only an option > right now). Makes it consistent with the "code is executed with the > right of its author" rule we have for wiki pages > 2) introduce some new virtual user (like "templateauthor" or > "scripter" or whatever) which only have script right and use that as > filesystem template author if we absolutely want template to not have > too many rights by default (even if modifying a filesystem template > require much more access than superadmin in practice) > > +1 for 1) >
-- Sergiu Dumitriu http://purl.org/net/sergiu _______________________________________________ devs mailing list devs@xwiki.org http://lists.xwiki.org/mailman/listinfo/devs
