Re: [xwiki-users] User Permissions Issue
Hi We completed the upgrade to 7.0.1 and my initial testing is showing that this is now working as expected (i.e. permissions are being applied immediately and users can be members of multiple groups) Thank you very much for sorting this out!! :-) Kind regards, Mahomed -Original Message- From: users [mailto:users-boun...@xwiki.org] On Behalf Of vinc...@massol.net Sent: 18 April 2015 19:03 To: Marius Dumitru Florea; XWiki Users Subject: Re: [xwiki-users] User Permissions Issue And 6.4.4 has now been released with a fix! :) Thanks -Vincent On 16 Apr 2015 at 11:00:02, Marius Dumitru Florea (mariusdumitru.flo...@xwiki.com(mailto:mariusdumitru.flo...@xwiki.com)) wrote: We just added a note to the 6.4.3 RN http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki643 . Check the text in red. Maybe you are facing the same issue. On Tue, Apr 14, 2015 at 7:22 PM, mahomed wrote: Thanks for still responding Hamster. Am I correct that you are using version 5.4.3 and not version 7? I think it got changed/broken in v6 ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] User Permissions Issue
And 6.4.4 has now been released with a fix! :) Thanks -Vincent On 16 Apr 2015 at 11:00:02, Marius Dumitru Florea (mariusdumitru.flo...@xwiki.com(mailto:mariusdumitru.flo...@xwiki.com)) wrote: We just added a note to the 6.4.3 RN http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki643 . Check the text in red. Maybe you are facing the same issue. On Tue, Apr 14, 2015 at 7:22 PM, mahomed wrote: Thanks for still responding Hamster. Am I correct that you are using version 5.4.3 and not version 7? I think it got changed/broken in v6 ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] User Permissions Issue
We just added a note to the 6.4.3 RN http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki643 . Check the text in red. Maybe you are facing the same issue. On Tue, Apr 14, 2015 at 7:22 PM, mahomed maho...@custodiandc.com wrote: Thanks for still responding Hamster. Am I correct that you are using version 5.4.3 and not version 7? I think it got changed/broken in v6 -- View this message in context: http://xwiki.475771.n2.nabble.com/User-Permissions-Issue-tp7594486p7594646.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] User Permissions Issue
Hi Marius Thank you for responding. This does look like it may be the issue because at some points it works for a bit then it stops working for me. In most cases it's pretty consistent with adding/removing the permissions. I can replicate the issue pretty consistently and can provide a test case. Would you like me to contribute any info or assist in any testing, or have you got everything you need to resolve this? Kind regards, Mahomed -Original Message- From: users [mailto:users-boun...@xwiki.org] On Behalf Of Marius Dumitru Florea Sent: 16 April 2015 10:00 To: XWiki Users Subject: Re: [xwiki-users] User Permissions Issue We just added a note to the 6.4.3 RN http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki643 . Check the text in red. Maybe you are facing the same issue. On Tue, Apr 14, 2015 at 7:22 PM, mahomed maho...@custodiandc.com wrote: Thanks for still responding Hamster. Am I correct that you are using version 5.4.3 and not version 7? I think it got changed/broken in v6 -- View this message in context: http://xwiki.475771.n2.nabble.com/User-Permissions-Issue-tp7594486p7594646.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] User Permissions Issue
I'll be more than happy to test. Except, maybe I've misunderstood something, but I believe I am running XWiki Enterprise 7.0. So will I have to wait for the next release of the 7.x train? Kind regards, Mahomed -Original Message- From: users [mailto:users-boun...@xwiki.org] On Behalf Of Marius Dumitru Florea Sent: 16 April 2015 14:38 To: XWiki Users Subject: Re: [xwiki-users] User Permissions Issue On Thu, Apr 16, 2015 at 3:50 PM, Mahomed Hussein maho...@custodiandc.com wrote: Hi Marius Thank you for responding. This does look like it may be the issue because at some points it works for a bit then it stops working for me. In most cases it's pretty consistent with adding/removing the permissions. I can replicate the issue pretty consistently and can provide a test case. Would you like me to contribute any info or assist in any testing, or have you got everything you need to resolve this? A fix has been committed already (thanks to Denis) and will be included in 6.4.4 to be released in the following days. Would be great if you can test the fix after the release is available. Thanks, Marius Kind regards, Mahomed -Original Message- From: users [mailto:users-boun...@xwiki.org] On Behalf Of Marius Dumitru Florea Sent: 16 April 2015 10:00 To: XWiki Users Subject: Re: [xwiki-users] User Permissions Issue We just added a note to the 6.4.3 RN http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki643 . Check the text in red. Maybe you are facing the same issue. On Tue, Apr 14, 2015 at 7:22 PM, mahomed maho...@custodiandc.com wrote: Thanks for still responding Hamster. Am I correct that you are using version 5.4.3 and not version 7? I think it got changed/broken in v6 -- View this message in context: http://xwiki.475771.n2.nabble.com/User-Permissions-Issue-tp7594486p7594646.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] User Permissions Issue
Thanks for still responding Hamster. Am I correct that you are using version 5.4.3 and not version 7? I think it got changed/broken in v6 -- View this message in context: http://xwiki.475771.n2.nabble.com/User-Permissions-Issue-tp7594486p7594646.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] User Permissions Issue
Yes, we also have users which are in multiple groups. No problems here... -- View this message in context: http://xwiki.475771.n2.nabble.com/User-Permissions-Issue-tp7594486p7594639.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] User Permissions Issue
Here's how I have created the permissions of our spaces: SpaceAdmin - Thicked all SpaceEditor - Thicked View, Comment and Edit SpaceViewer - Thicked View and Comment So basicly your first screenshot. There's no need apply any Deny rights. The thicks of the SpaceAdmin will deny those rights for anyone NOT in the SpaceAdmin group. Thus you need to apply the thicks on View, Comment and Edit in the other groups. In order to see these right changes, I always close my browser (IE11) and open XWiki again. HTH! -- View this message in context: http://xwiki.475771.n2.nabble.com/User-Permissions-Issue-tp7594486p7594587.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] User Permissions Issue
Hi As anyone else got any tips/suggestions/advice/links on a better way of restricting access to document and even spaces? The sub-wiki idea may work, but it's a LOT of work (even though we just started using the Wiki, people have fallen in love with XWiki and we now have quite an amount data in the system). Am I correct that in order to get proper use out of the permissions system, users can only be members of one group (possibly excluding the XWikiAllGroup)? -- View this message in context: http://xwiki.475771.n2.nabble.com/User-Permissions-Issue-tp7594486p7594579.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] User Permissions Issue
Hi Thanks for the response. What you have shown seems to work partially for us. The issue happens if the user is a member of a group for a different space. So taking your example a bit further: Space1Admin - ticked all Space1Editor - ticked View, Comment and Edit Space1Viewer - ticked View and Comment Space2Admin - ticked all Space2Editor - ticked View, Comment and Edit Space2Viewer - ticked View and Comment If user is member of Space1Viewer and Space2Admin then the user usually ends up with no access to Space2. This is where our problem comes up because we need some users to be members of multiple spaces. No help from Devs please? -- View this message in context: http://xwiki.475771.n2.nabble.com/User-Permissions-Issue-tp7594486p7594593.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] User Permissions Issue
Hi I've tried reading through the security and rights articles but I'm afraid it hasn't really helped make things any clearer for me. At the moment I have this very strange scenario where adding/removing users to a group doesn't immediately (or at all) apply the permission unless I add and remove XWikiAllGroup to the group and then remove it. http://xwiki.475771.n2.nabble.com/file/n7594521/sales_rights.png Above is how the permissions are applied to the Sales space. I then add my MH Test user to one group (e.g. sales_write) and then try and refresh in Firefox (Using private mode and clearing the local cache. Using refresh=1 doesn't help either). Only once did I manage to make the user able to see the space. But, if I add the test user to the group and then add XWikiAllGroup and refresh then I can see the space. If I then remove XWikiAllGroup from the group, I can STILL see the space and make changes etc. I have allowed XWikiAllGroup View Permission in a different group called General-Read which I created in order to allow read-access to the General space. It appears to me that XWiki is seeing the user as part of XWikiAllGroup in General-Read and see that General-Read doesn't have explicit allow or deny and then ties with the permission of allow in Sales_Read and apparently Deny wins? Below are screenshots of how the General-* has its permissions applied in the Sales space. http://xwiki.475771.n2.nabble.com/file/n7594521/general_permissions_in_sales.png I have gone further and removed XWikiAllGroup from General-Read and I can then immediately see the permissions in the Sales-* groups being applied. If I then add the Sales-* groups as sub-groups of General-Read, then I get the same behaviour, i.e. user of Sales* gets denied permission. As I write this, I'm starting to think/understand that this is the designed behaviour and my only solution will be to use Sub-Wikis instead of spaces. So for example Sales sub-wiki and General sub-wiki. Users would be members/registered to the main wiki, but I could then create groups in the sub-wiki for Read, Read/Write, Admin and it wouldn't get over-ridden/collide with permissions/user in other groups. Can anyone tell me if I'm on the right track or point me at some documentation or provide some tips please? Thanks in advance for your time and help. -- View this message in context: http://xwiki.475771.n2.nabble.com/User-Permissions-Issue-tp7594486p7594521.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users