Re: [xwiki-users] Removing the Register Link

[Vincent Massol]

Hi,

We need to modify 
http://platform.xwiki.org/xwiki/bin/view/Features/RightsManagement 
  to explain this. I think Jerome is working on this.

Basically when you allow a right to a group it means the other groups  
won't have it allowed unless you explicitely allow them.

I don't full remember the rationale behind this, maybe Sergiu or  
Ludovic can help here. That said I do agree it's not self explicit and  
I'd be for changing that although that would be a big change (we need  
to discuss it for when we're going to rewrite the authorization module).

Thanks
-Vincent

On Dec 6, 2008, at 3:10 AM, Nick Watts wrote:

 I'm using XWiki Enterprise version 1.6.1.13621.  I was following the
 instructions in the FAQ to forbid registration (
 http://www.xwiki.org/xwiki/bin/view/FAQ/HowCanIForbidRegistration,  
 which
 seems to be out-of-date for my version BTW) and noticed some strange
 behavior.  I don't want anyone to self-register so I denied access  
 in the
 Register column of the Rights admin page for all groups.  I  
 logged out
 and noticed the register link was still on the page.  I tried  
 registering a
 fake user and it worked.  After playing around for a while I figured  
 out
 that I had to actually grant Register access for the XWikiAdminGroup  
 group
 to get the Register link to disappear.  If I deny Register access or  
 just
 leave it blank for the XWikiAdminGroup group the Register link is  
 present
 and works.  This is backwards to me.  Without looking at the code it  
 seems
 like a logical error somewhere.  Could someone tell me whether I'm
 understanding this process correctly or not?

 -- 
 Nick Watts
 blog: thewonggei.wordpress.com


___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] Removing the Register Link

[Sergiu Dumitriu]

Nick Watts wrote:
 I'm using XWiki Enterprise version 1.6.1.13621.  I was following the
 instructions in the FAQ to forbid registration (
 http://www.xwiki.org/xwiki/bin/view/FAQ/HowCanIForbidRegistration, which
 seems to be out-of-date for my version BTW) and noticed some strange
 behavior.  I don't want anyone to self-register so I denied access in the
 Register column of the Rights admin page for all groups.  I logged out
 and noticed the register link was still on the page.  I tried registering a
 fake user and it worked.  After playing around for a while I figured out
 that I had to actually grant Register access for the XWikiAdminGroup group
 to get the Register link to disappear.  If I deny Register access or just
 leave it blank for the XWikiAdminGroup group the Register link is present
 and works.  This is backwards to me.  Without looking at the code it seems
 like a logical error somewhere.  Could someone tell me whether I'm
 understanding this process correctly or not?
 

Did you forbid the right to the guest also?

The guest appears when you select Users instead of Groups, and is the 
first entry, above the filter, called Unregistered Users.

To remove the registration link completely, you can override the 
global.vm template in a custom skin. Admins will still be able to use 
the Administration-Users interface to add users.
-- 
Sergiu Dumitriu
http://purl.org/net/sergiu/
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users