Re: [xwiki-users] Programming rights ignored in the wiki farm while extension installation
On Thu, Aug 29, 2013 at 7:14 PM, Dmitry Bakbardin haru_mamb...@mail.ru wrote: Hi, Thomas, Thanks a lot, now it works. But anyhow, there is a problem to resave macro pages, UI pages to make it running. Is there any other solution to make it working out of the box? You don't have to resave pages, these pages were installed with a user that does not have PR so you had to save them with a proper one. Kind regards, Dmitry Четверг, 29 августа 2013, 11:32 +02:00 от Thomas Mortagne thomas.morta...@xwiki.com: It's possible the issue you have has nothing to do with the current user but with the current author (which is checked too so that you don't end up in a situation when anyone can install anything just by waiting that an admin goes to a page). Try to resave the http://mysubwikihost/xwiki/bin/view/XWiki/AddExtensions page. On Thu, Aug 8, 2013 at 3:11 PM, Dmitry Bakbardin haru_mamb...@mail.ru wrote: User is Global, member of the definite Global Group. Global Group has ALL rights on sub-wiki. There is no problem to save pages with programming rights in this sub-wiki. The only problem is Extension manager in there. Четверг, 8 августа 2013, 15:05 +02:00 от Jeremie BOUSQUET jeremie.bousq...@gmail.com : Hi, I think maybe even if user is global and has admin rights on main wiki, he doesn't have by default admin rights on sub-wikis. I'm not very sure, but you might want to check its rights in the local wiki admin. Also, I didn't think XEM could manage global users in sub-wikis but I'm even less sure of that ;-) BR, Jeremie 2013/8/8 Dmitry Bakbardinharu_mamb...@mail.ru Hi! XEM 4.3. Attempt to install Freemind Macro to the sub-wiki via sub-wiki's Extension Manager: Resolving extension [fmancinelli:freemind-macro-1.0] on namespace [wiki:staff] Admin right is required to install extension [fmancinelli:freemind-macro-1.0] on namespace [wiki:staff] The problem is: user is Global and has programming rights. Is it expected behaviour or bug? Error details are following: class org.xwiki.extension.InstallException: Failed to resolve extension at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:685) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:384) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:296) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.start(AbstractInstallPlanJob.java:226) at org.xwiki.extension.job.internal.InstallPlanJob.start(InstallPlanJob.java:88) at org.xwiki.job.AbstractJob.start(AbstractJob.java:134) at org.xwiki.job.internal.DefaultJobManager.run(DefaultJobManager.java:154) at java.lang.Thread.run(Thread.java:722) Caused by: class org.xwiki.extension.InstallException: Admin right is required to install extension [fmancinelli:freemind-macro-1.0] on namespace [wiki:staff] at org.xwiki.extension.xar.internal.handler.XarExtensionHandler.checkInstall(XarExtensionHandler.java:308) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:771) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:683) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:384) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:296) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.start(AbstractInstallPlanJob.java:226) at org.xwiki.extension.job.internal.InstallPlanJob.start(InstallPlanJob.java:88) at org.xwiki.job.AbstractJob.start(AbstractJob.java:134) at org.xwiki.job.internal.DefaultJobManager.run(DefaultJobManager.java:154) at java.lang.Thread.run(Thread.java:722) Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights ignored in the wiki farm while extension installation
Пятница, 30 августа 2013, 8:23 +02:00 от Thomas Mortagne thomas.morta...@xwiki.com: On Thu, Aug 29, 2013 at 7:14 PM, Dmitry Bakbardin haru_mamb...@mail.ru wrote: Hi, Thomas, Thanks a lot, now it works. But anyhow, there is a problem to resave macro pages, UI pages to make it running. Is there any other solution to make it working out of the box? You don't have to resave pages, these pages were installed with a user that does not have PR so you had to save them with a proper one. I will describe full process to make clear how it happened: - Brand new XEM - New GlobalUser was created and PR rights were assigned. This user was logged in and all futher manipulations are done under this account (!) . - XEM creates workspacetemplate automatically - Few pages were modified in the workspacetemplate (logo + panels) - New workspace was created from the template - Attempt to install extension into the new workspace gives Admin right is required to install extension... What was wrong in this case? I mean were the user with no admin rights is taken from to save new workspace/workspacetemplate pages? Kind regards, Dmitry Четверг, 29 августа 2013, 11:32 +02:00 от Thomas Mortagne thomas.morta...@xwiki.com : It's possible the issue you have has nothing to do with the current user but with the current author (which is checked too so that you don't end up in a situation when anyone can install anything just by waiting that an admin goes to a page). Try to resave the http://mysubwikihost/xwiki/bin/view/XWiki/AddExtensions page. On Thu, Aug 8, 2013 at 3:11 PM, Dmitry Bakbardin haru_mamb...@mail.ru wrote: User is Global, member of the definite Global Group. Global Group has ALL rights on sub-wiki. There is no problem to save pages with programming rights in this sub-wiki. The only problem is Extension manager in there. Четверг, 8 августа 2013, 15:05 +02:00 от Jeremie BOUSQUET jeremie.bousq...@gmail.com : Hi, I think maybe even if user is global and has admin rights on main wiki, he doesn't have by default admin rights on sub-wikis. I'm not very sure, but you might want to check its rights in the local wiki admin. Also, I didn't think XEM could manage global users in sub-wikis but I'm even less sure of that ;-) BR, Jeremie 2013/8/8 Dmitry Bakbardinharu_mamb...@mail.ru Hi! XEM 4.3. Attempt to install Freemind Macro to the sub-wiki via sub-wiki's Extension Manager: Resolving extension [fmancinelli:freemind-macro-1.0] on namespace [wiki:staff] Admin right is required to install extension [fmancinelli:freemind-macro-1.0] on namespace [wiki:staff] The problem is: user is Global and has programming rights. Is it expected behaviour or bug? Error details are following: class org.xwiki.extension.InstallException: Failed to resolve extension at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:685) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:384) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:296) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.start(AbstractInstallPlanJob.java:226) at org.xwiki.extension.job.internal.InstallPlanJob.start(InstallPlanJob.java:88) at org.xwiki.job.AbstractJob.start(AbstractJob.java:134) at org.xwiki.job.internal.DefaultJobManager.run(DefaultJobManager.java:154) at java.lang.Thread.run(Thread.java:722) Caused by: class org.xwiki.extension.InstallException: Admin right is required to install extension [fmancinelli:freemind-macro-1.0] on namespace [wiki:staff] at org.xwiki.extension.xar.internal.handler.XarExtensionHandler.checkInstall(XarExtensionHandler.java:308) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:771) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:683) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:384) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:296) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.start(AbstractInstallPlanJob.java:226) at org.xwiki.extension.job.internal.InstallPlanJob.start(InstallPlanJob.java:88) at org.xwiki.job.AbstractJob.start(AbstractJob.java:134) at org.xwiki.job.internal.DefaultJobManager.run(DefaultJobManager.java:154) at java.lang.Thread.run(Thread.java:722) Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne
Re: [xwiki-users] Programming rights ignored in the wiki farm while extension installation
Hi, Thomas, Thanks a lot, now it works. But anyhow, there is a problem to resave macro pages, UI pages to make it running. Is there any other solution to make it working out of the box? Kind regards, Dmitry Четверг, 29 августа 2013, 11:32 +02:00 от Thomas Mortagne thomas.morta...@xwiki.com: It's possible the issue you have has nothing to do with the current user but with the current author (which is checked too so that you don't end up in a situation when anyone can install anything just by waiting that an admin goes to a page). Try to resave the http://mysubwikihost/xwiki/bin/view/XWiki/AddExtensions page. On Thu, Aug 8, 2013 at 3:11 PM, Dmitry Bakbardin haru_mamb...@mail.ru wrote: User is Global, member of the definite Global Group. Global Group has ALL rights on sub-wiki. There is no problem to save pages with programming rights in this sub-wiki. The only problem is Extension manager in there. Четверг, 8 августа 2013, 15:05 +02:00 от Jeremie BOUSQUET jeremie.bousq...@gmail.com : Hi, I think maybe even if user is global and has admin rights on main wiki, he doesn't have by default admin rights on sub-wikis. I'm not very sure, but you might want to check its rights in the local wiki admin. Also, I didn't think XEM could manage global users in sub-wikis but I'm even less sure of that ;-) BR, Jeremie 2013/8/8 Dmitry Bakbardinharu_mamb...@mail.ru Hi! XEM 4.3. Attempt to install Freemind Macro to the sub-wiki via sub-wiki's Extension Manager: Resolving extension [fmancinelli:freemind-macro-1.0] on namespace [wiki:staff] Admin right is required to install extension [fmancinelli:freemind-macro-1.0] on namespace [wiki:staff] The problem is: user is Global and has programming rights. Is it expected behaviour or bug? Error details are following: class org.xwiki.extension.InstallException: Failed to resolve extension at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:685) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:384) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:296) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.start(AbstractInstallPlanJob.java:226) at org.xwiki.extension.job.internal.InstallPlanJob.start(InstallPlanJob.java:88) at org.xwiki.job.AbstractJob.start(AbstractJob.java:134) at org.xwiki.job.internal.DefaultJobManager.run(DefaultJobManager.java:154) at java.lang.Thread.run(Thread.java:722) Caused by: class org.xwiki.extension.InstallException: Admin right is required to install extension [fmancinelli:freemind-macro-1.0] on namespace [wiki:staff] at org.xwiki.extension.xar.internal.handler.XarExtensionHandler.checkInstall(XarExtensionHandler.java:308) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:771) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:683) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:384) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.installExtension(AbstractInstallPlanJob.java:296) at org.xwiki.extension.job.internal.AbstractInstallPlanJob.start(AbstractInstallPlanJob.java:226) at org.xwiki.extension.job.internal.InstallPlanJob.start(InstallPlanJob.java:88) at org.xwiki.job.AbstractJob.start(AbstractJob.java:134) at org.xwiki.job.internal.DefaultJobManager.run(DefaultJobManager.java:154) at java.lang.Thread.run(Thread.java:722) Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] programming rights in xwiki farm
Hi, I don't know AppWithinMinutes very well but I don't really see exactly what it has to do with the rest of the mail. AFAIK you don't need PR to use AppWithinMinutes. Also what I said is that a user from subwiki does not have programming right but you can save a page from any wiki using a global user (user from main wiki). You just need to log in the subwiki with your global user. Please to send direct mail, better use the mailing list. On Thu, Oct 11, 2012 at 11:08 PM, poppa...@yahoo.com wrote: Hi Thomas, I am a bit perplexed. The AppWithinMinutes won't run in a sub-wiki then? I created an app in the main wiki, but in a sub wiki I am getting that macro error. quote author='Thomas Mortagne' On Sat, Apr 28, 2012 at 2:52 PM, Bob Egolf ego...@gmail.com wrote: I have been running a simple xwiki farm with 2 sub wikis for some time and I recently tried to add a macro with a groovy script in the sub-wiki and got the You don't have the right to execute this script. I tried to grant programming to the user by logging into the wiki farm site and granting programming to the group and to the user I am using in the sub-wiki. I imported the Admin tools application and ran the Programming rights Check and applied the config. I still am not able to grant the user programming rights and my macro with the script will not run, same permissions error. I have tried to create a new user in the wiki farm and grant programming to it, but when I login to the subwiki it has no permissions so I don't believe I have him setup quite right. This is running XWiki Enterprise 2.3.1.29183 build, not sure where to go from here. Users from subwikis don't have programming right, never. There is nothing you can do to make them have it. So you will have to use a user from main wiki to save your macro document. Any help appreciated. Bob ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users /quote Quoted from: http://xwiki.475771.n2.nabble.com/programming-rights-in-xwiki-farm-tp7508804p7516299.html -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] programming rights in xwiki farm
On Sat, Apr 28, 2012 at 2:52 PM, Bob Egolf ego...@gmail.com wrote: I have been running a simple xwiki farm with 2 sub wikis for some time and I recently tried to add a macro with a groovy script in the sub-wiki and got the You don't have the right to execute this script. I tried to grant programming to the user by logging into the wiki farm site and granting programming to the group and to the user I am using in the sub-wiki. I imported the Admin tools application and ran the Programming rights Check and applied the config. I still am not able to grant the user programming rights and my macro with the script will not run, same permissions error. I have tried to create a new user in the wiki farm and grant programming to it, but when I login to the subwiki it has no permissions so I don't believe I have him setup quite right. This is running XWiki Enterprise 2.3.1.29183 build, not sure where to go from here. Users from subwikis don't have programming right, never. There is nothing you can do to make them have it. So you will have to use a user from main wiki to save your macro document. Any help appreciated. Bob ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] programming rights in xwiki farm
I have been running a simple xwiki farm with 2 sub wikis for some time and I recently tried to add a macro with a groovy script in the sub-wiki and got the You don't have the right to execute this script. I tried to grant programming to the user by logging into the wiki farm site and granting programming to the group and to the user I am using in the sub-wiki. I imported the Admin tools application and ran the Programming rights Check and applied the config. I still am not able to grant the user programming rights and my macro with the script will not run, same permissions error. I have tried to create a new user in the wiki farm and grant programming to it, but when I login to the subwiki it has no permissions so I don't believe I have him setup quite right. This is running XWiki Enterprise 2.3.1.29183 build, not sure where to go from here. Any help appreciated. Bob ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] programming rights in class sheet
And once again thanks, Sergiu! - Ursprüngliche Message - Von: Sergiu Dumitriu ser...@xwiki.com An: XWiki Users users@xwiki.org Cc: Gesendet: 7:28 Sonntag, 5.Februar 2012 Betreff: Re: [xwiki-users] programming rights in class sheet On 02/04/2012 06:22 AM, O Voss wrote: Hi, In documents based on a certain class I need to list the attachments of the document. I used the 'List attachments of a page'-snippet from http://platform.xwiki.org/xwiki/bin/view/DevGuide/velocityHqlExamples in the class sheet. This works perfectly fine as long as the document is saved by a user with programming rights. When saved by a normal user it doesn't work, as the priviledged API is used. Is there some workaround or solution for this? For that there's a simple API: #foreach ($attachment in $doc.attachmentList) * $attachment.filename #end -- Sergiu Dumitriu http://purl.org/net/sergiu/ ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] programming rights in class sheet
On Sat, Feb 4, 2012 at 1:22 PM, O Voss richyfourtyth...@yahoo.com wrote: Hi, In documents based on a certain class I need to list the attachments of the document. I used the 'List attachments of a page'-snippet from http://platform.xwiki.org/xwiki/bin/view/DevGuide/velocityHqlExamples in the class sheet. This works perfectly fine as long as the document is saved by a user with programming rights. When saved by a normal user it doesn't work, as the priviledged API is used. Is there some workaround or solution for this? Are you using the new sheet system? See http://extensions.xwiki.org/xwiki/bin/view/Extension/Sheet+Module#HSheetsandprogrammingrights . Hope this helps, Marius Thanks Olaf ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] programming rights in class sheet
Hi, In documents based on a certain class I need to list the attachments of the document. I used the 'List attachments of a page'-snippet from http://platform.xwiki.org/xwiki/bin/view/DevGuide/velocityHqlExamples in the class sheet. This works perfectly fine as long as the document is saved by a user with programming rights. When saved by a normal user it doesn't work, as the priviledged API is used. Is there some workaround or solution for this? Thanks Olaf ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] programming rights in class sheet
On 02/04/2012 06:22 AM, O Voss wrote: Hi, In documents based on a certain class I need to list the attachments of the document. I used the 'List attachments of a page'-snippet from http://platform.xwiki.org/xwiki/bin/view/DevGuide/velocityHqlExamples in the class sheet. This works perfectly fine as long as the document is saved by a user with programming rights. When saved by a normal user it doesn't work, as the priviledged API is used. Is there some workaround or solution for this? For that there's a simple API: #foreach ($attachment in $doc.attachmentList) * $attachment.filename #end -- Sergiu Dumitriu http://purl.org/net/sergiu/ ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights needed for Copy Action
Waiting the correction of the bug you can correct it now by modifying the
file contentmenu.vm of the template you use, you look for the word copy,
you'll find:
#if( $xwiki.hasProgrammingRights())
#submenuitem($doc.getURL('view', 'xpage=copy') $msg.get('core.menu.copy')
'tmActionCopy', '')
#end
and you delete the lines before and after that prevent it to be displayed
you must get:
#submenuitem($doc.getURL('view', 'xpage=copy') $msg.get('core.menu.copy')
'tmActionCopy', '')
so that every user has access to the copy.
--
View this message in context:
http://n2.nabble.com/Programming-rights-needed-for-Copy-Action-tp4677178p4679599.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights needed for Copy Action
Hi Raphaelle,
On Mar 5, 2010, at 9:18 AM, raphaelle wrote:
Waiting the correction of the bug you can correct it now by modifying the
file contentmenu.vm of the template you use, you look for the word copy,
you'll find:
#if( $xwiki.hasProgrammingRights())
#submenuitem($doc.getURL('view', 'xpage=copy') $msg.get('core.menu.copy')
'tmActionCopy', '')
#end
and you delete the lines before and after that prevent it to be displayed
you must get:
#submenuitem($doc.getURL('view', 'xpage=copy') $msg.get('core.menu.copy')
'tmActionCopy', '')
so that every user has access to the copy.
That won't work. The reason for these lines is because the copy code thereafter
requires programming rights (PR) so this code is just to ensure that users with
no PR don't see the copy action menu since it would fail.
-Vincent
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights needed for Copy Action
indeed just realized it... I tried to cheat and modify the rights on the page Copy a document to link on her, so that all my users could copy, but it doesn't work... there is'nt a way to bypass the rights with some Velocity code put in the right place? -- View this message in context: http://n2.nabble.com/Programming-rights-needed-for-Copy-Action-tp4677178p4679753.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] Programming rights needed for Copy Action
Hi, Why are programming rights needed to view the Copy Link? According to the user guide, Programming rights are described as privileges to use protected APIs Groovy code in wiki pages. I read the JIRA at http://jira.xwiki.org/jira/browse/XE-374 and it seems that originally, users without PR weren't able to copy pages even though the copy link was showed, so the non-viewable feature was added as a fix. What I don't understand is how copying action relates to using protected APIs and groovy code at all, or in other words, why the last editor of the page must have programming rights in order for the Copy Action to show up for anyone. Thanks Felix ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights needed for Copy Action
On 03/04/2010 09:54 PM, Meng Wu wrote: Hi, Why are programming rights needed to view the Copy Link? According to the user guide, Programming rights are described as privileges to use protected APIs Groovy code in wiki pages. I read the JIRA at http://jira.xwiki.org/jira/browse/XE-374 and it seems that originally, users without PR weren't able to copy pages even though the copy link was showed, so the non-viewable feature was added as a fix. What I don't understand is how copying action relates to using protected APIs and groovy code at all, or in other words, why the last editor of the page must have programming rights in order for the Copy Action to show up for anyone. That's just a bug, Copy should work without programming rights. -- Sergiu Dumitriu http://purl.org/net/sergiu/ ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights needed for Copy Action
Thanks Sergiu. Is there a jira bug number I can follow when the bug gets fixed? Thanks, Felix - Original Message From: Sergiu Dumitriu ser...@xwiki.com To: XWiki Users users@xwiki.org Sent: Thu, March 4, 2010 4:05:36 PM Subject: Re: [xwiki-users] Programming rights needed for Copy Action On 03/04/2010 09:54 PM, Meng Wu wrote: Hi, Why are programming rights needed to view the Copy Link? According to the user guide, Programming rights are described as privileges to use protected APIs Groovy code in wiki pages. I read the JIRA at http://jira.xwiki.org/jira/browse/XE-374 and it seems that originally, users without PR weren't able to copy pages even though the copy link was showed, so the non-viewable feature was added as a fix. What I don't understand is how copying action relates to using protected APIs and groovy code at all, or in other words, why the last editor of the page must have programming rights in order for the Copy Action to show up for anyone. That's just a bug, Copy should work without programming rights. -- Sergiu Dumitriu http://purl.org/net/sergiu/ ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights needed for Copy Action
On 03/04/2010 11:25 PM, Meng Wu wrote: Thanks Sergiu. Is there a jira bug number I can follow when the bug gets fixed? Yes, http://jira.xwiki.org/jira/browse/XWIKI-3961 - Original Message From: Sergiu Dumitriuser...@xwiki.com To: XWiki Usersusers@xwiki.org Sent: Thu, March 4, 2010 4:05:36 PM Subject: Re: [xwiki-users] Programming rights needed for Copy Action On 03/04/2010 09:54 PM, Meng Wu wrote: Hi, Why are programming rights needed to view the Copy Link? According to the user guide, Programming rights are described as privileges to use protected APIs Groovy code in wiki pages. I read the JIRA at http://jira.xwiki.org/jira/browse/XE-374 and it seems that originally, users without PR weren't able to copy pages even though the copy link was showed, so the non-viewable feature was added as a fix. What I don't understand is how copying action relates to using protected APIs and groovy code at all, or in other words, why the last editor of the page must have programming rights in order for the Copy Action to show up for anyone. That's just a bug, Copy should work without programming rights. -- Sergiu Dumitriu http://purl.org/net/sergiu/ ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights in virtual wiki
On Fri, Mar 27, 2009 at 5:07 PM, hel-o h...@hel.at wrote: don't know if thats another use case but at the moment i cant copy pages in the virtual wiki. It works in the main wiki and i tried in the virtual wiki with the global user and the local user. When i copy a page sucess message appears, but when i click the link for the new page, the page does not exist. http://jira.xwiki.org/jira/browse/XE-374 Actions-Copy of document doesn't work, but claims successNiels http://nielsmayer.com ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights in virtual wiki
Hi, is there a special reason for that, and is it planned for a future release to have the possibility to have programming rights in a virtual wiki? hel. Hel-o, Only users registered on the main wiki can be granted programming access level. But they can save pages with the programming rights on sub wikis. Jerome. hel-o wrote: Hi, is there a way to give programming rights to a user in a virtual wiki? Thanks hel. - hel. h...@hel.at ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users - hel. h...@hel.at -- View this message in context: http://n2.nabble.com/Programming-rights-in-virtual-wiki-tp2538608p2544266.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights in virtual wiki
Vincent Massol wrote: Hi Hel, On Mar 27, 2009, at 2:28 PM, hel-o wrote: Hi, is there a special reason for that, Is this is for security issues since one wiki in a farm could endanger all the wikis in the farm very easily since a local user would get access to a powerful API. To be more detailed, a user with programming rights has absolute access on the whole server (using Groovy), and in a public farm if a wiki admin gives himself programming rights, he can seriously affect the entire server. Imagine if somebody could do anything on the whole Blogspot farm... and is it planned for a future release to have the possibility to have programming rights in a virtual wiki? No. It depends. There is an issue on jira.xwiki.org about having an option for this, defaulting to false, but there's no requirement for this. Programming rights are really a dangerous thing, I don't see any need to grant them to anybody except one global account that decides what is safe. hel. Hel-o, Only users registered on the main wiki can be granted programming access level. But they can save pages with the programming rights on sub wikis. Jerome. hel-o wrote: Hi, is there a way to give programming rights to a user in a virtual wiki? Thanks hel. -- Sergiu Dumitriu http://purl.org/net/sergiu/ ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights in virtual wiki
On Mar 27, 2009, at 3:48 PM, Sergiu Dumitriu wrote: Vincent Massol wrote: Hi Hel, On Mar 27, 2009, at 2:28 PM, hel-o wrote: Hi, is there a special reason for that, Is this is for security issues since one wiki in a farm could endanger all the wikis in the farm very easily since a local user would get access to a powerful API. To be more detailed, a user with programming rights has absolute access on the whole server (using Groovy), and in a public farm if a wiki admin gives himself programming rights, he can seriously affect the entire server. Imagine if somebody could do anything on the whole Blogspot farm... and is it planned for a future release to have the possibility to have programming rights in a virtual wiki? No. It depends. There is an issue on jira.xwiki.org about having an option for this, defaulting to false, but there's no requirement for this. Programming rights are really a dangerous thing, I don't see any need to grant them to anybody except one global account that decides what is safe. Indeed, if you need programming rights for a given api maybe a better way would be to provide that API without programming rights (if it's safe). What's your use case? Thanks -Vincent hel. Hel-o, Only users registered on the main wiki can be granted programming access level. But they can save pages with the programming rights on sub wikis. Jerome. hel-o wrote: Hi, is there a way to give programming rights to a user in a virtual wiki? Thanks hel. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights in virtual wiki
Hi, use case would be, that any action a local user might want to do that needs programming rights is not possible (using codes, macros, applications (Import Export Application) from the code zone or creating own scripts using Velocity). And i would not like to grant every user who needs programming rights, because he wants to do one of the things mentioned above a global account. For me it is not that much of a problem, because i have also an global account and i really understand your concerns about security. But its also limiting the abilities of a virtual wiki environment. But what i get from what your saying is, that its not possible to restrict the programming rights for a local user only to his virtual wiki. hel. On Mar 27, 2009, at 3:48 PM, Sergiu Dumitriu wrote: Vincent Massol wrote: Hi Hel, On Mar 27, 2009, at 2:28 PM, hel-o wrote: Hi, is there a special reason for that, Is this is for security issues since one wiki in a farm could endanger all the wikis in the farm very easily since a local user would get access to a powerful API. To be more detailed, a user with programming rights has absolute access on the whole server (using Groovy), and in a public farm if a wiki admin gives himself programming rights, he can seriously affect the entire server. Imagine if somebody could do anything on the whole Blogspot farm... and is it planned for a future release to have the possibility to have programming rights in a virtual wiki? No. It depends. There is an issue on jira.xwiki.org about having an option for this, defaulting to false, but there's no requirement for this. Programming rights are really a dangerous thing, I don't see any need to grant them to anybody except one global account that decides what is safe. Indeed, if you need programming rights for a given api maybe a better way would be to provide that API without programming rights (if it's safe). What's your use case? Thanks -Vincent hel. Hel-o, Only users registered on the main wiki can be granted programming access level. But they can save pages with the programming rights on sub wikis. Jerome. hel-o wrote: Hi, is there a way to give programming rights to a user in a virtual wiki? Thanks hel. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users - hel. h...@hel.at -- View this message in context: http://n2.nabble.com/Programming-rights-in-virtual-wiki-tp2538608p2544919.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights in virtual wiki
On Mar 27, 2009, at 4:41 PM, hel-o wrote: Hi, use case would be, that any action a local user might want to do that needs programming rights is not possible (using codes, macros, applications (Import Export Application) from the code zone or creating own scripts using Velocity). And i would not like to grant every user who needs programming rights, because he wants to do one of the things mentioned above a global account. Velocity doesn't require programming rights. Only Groovy and some Java APIs do require programming rights. For Groovy I hope we'll fix this in the future by having it run in its own sandbox. For the APIs it's done voluntarily. Accessing the private XWiki instance, the XWikiDocument or XWikiContext is not supposed to happen for users. These APIs are meant to be used internally only. If you're missing a given public API you should tell us and we can see on a case by case basis if we could make it available in the public API. Thanks -Vincent For me it is not that much of a problem, because i have also an global account and i really understand your concerns about security. But its also limiting the abilities of a virtual wiki environment. But what i get from what your saying is, that its not possible to restrict the programming rights for a local user only to his virtual wiki. hel. On Mar 27, 2009, at 3:48 PM, Sergiu Dumitriu wrote: Vincent Massol wrote: Hi Hel, On Mar 27, 2009, at 2:28 PM, hel-o wrote: Hi, is there a special reason for that, Is this is for security issues since one wiki in a farm could endanger all the wikis in the farm very easily since a local user would get access to a powerful API. To be more detailed, a user with programming rights has absolute access on the whole server (using Groovy), and in a public farm if a wiki admin gives himself programming rights, he can seriously affect the entire server. Imagine if somebody could do anything on the whole Blogspot farm... and is it planned for a future release to have the possibility to have programming rights in a virtual wiki? No. It depends. There is an issue on jira.xwiki.org about having an option for this, defaulting to false, but there's no requirement for this. Programming rights are really a dangerous thing, I don't see any need to grant them to anybody except one global account that decides what is safe. Indeed, if you need programming rights for a given api maybe a better way would be to provide that API without programming rights (if it's safe). What's your use case? Thanks -Vincent hel. Hel-o, Only users registered on the main wiki can be granted programming access level. But they can save pages with the programming rights on sub wikis. Jerome. hel-o wrote: Hi, is there a way to give programming rights to a user in a virtual wiki? Thanks hel. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users - hel. h...@hel.at -- View this message in context: http://n2.nabble.com/Programming-rights-in-virtual-wiki-tp2538608p2544919.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights in virtual wiki
On Fri, Mar 27, 2009 at 16:50, Vincent Massol vinc...@massol.net wrote: On Mar 27, 2009, at 4:41 PM, hel-o wrote: Hi, use case would be, that any action a local user might want to do that needs programming rights is not possible (using codes, macros, applications (Import Export Application) from the code zone or creating own scripts using Velocity). And i would not like to grant every user who needs programming rights, because he wants to do one of the things mentioned above a global account. Velocity doesn't require programming rights. Only Groovy and some Java APIs do require programming rights. For Groovy I hope we'll fix this in the future by having it run in its own sandbox. For the APIs it's done voluntarily. Accessing the private XWiki instance, the XWikiDocument or XWikiContext is not supposed to happen for users. These APIs are meant to be used internally only. If you're missing a given public API you should tell us and we can see on a case by case basis if we could make it available in the public API. Or you can provide additional public api by writing a plugin. Thanks -Vincent For me it is not that much of a problem, because i have also an global account and i really understand your concerns about security. But its also limiting the abilities of a virtual wiki environment. But what i get from what your saying is, that its not possible to restrict the programming rights for a local user only to his virtual wiki. hel. On Mar 27, 2009, at 3:48 PM, Sergiu Dumitriu wrote: Vincent Massol wrote: Hi Hel, On Mar 27, 2009, at 2:28 PM, hel-o wrote: Hi, is there a special reason for that, Is this is for security issues since one wiki in a farm could endanger all the wikis in the farm very easily since a local user would get access to a powerful API. To be more detailed, a user with programming rights has absolute access on the whole server (using Groovy), and in a public farm if a wiki admin gives himself programming rights, he can seriously affect the entire server. Imagine if somebody could do anything on the whole Blogspot farm... and is it planned for a future release to have the possibility to have programming rights in a virtual wiki? No. It depends. There is an issue on jira.xwiki.org about having an option for this, defaulting to false, but there's no requirement for this. Programming rights are really a dangerous thing, I don't see any need to grant them to anybody except one global account that decides what is safe. Indeed, if you need programming rights for a given api maybe a better way would be to provide that API without programming rights (if it's safe). What's your use case? Thanks -Vincent hel. Hel-o, Only users registered on the main wiki can be granted programming access level. But they can save pages with the programming rights on sub wikis. Jerome. hel-o wrote: Hi, is there a way to give programming rights to a user in a virtual wiki? Thanks hel. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users - hel. h...@hel.at -- View this message in context: http://n2.nabble.com/Programming-rights-in-virtual-wiki-tp2538608p2544919.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights in virtual wiki
hel-o wrote: Hi, use case would be, that any action a local user might want to do that needs programming rights is not possible (using codes, macros, applications (Import Export Application) from the code zone or creating own scripts using Velocity). And i would not like to grant every user who needs programming rights, because he wants to do one of the things mentioned above a global account. Note that unlike all the other rights, programming does not apply to the current user, but to the user that last saved the document. Also, as Vincent said, most of the API is public and runs without programming rights. For me it is not that much of a problem, because i have also an global account and i really understand your concerns about security. But its also limiting the abilities of a virtual wiki environment. But what i get from what your saying is, that its not possible to restrict the programming rights for a local user only to his virtual wiki. No, because you get access to internal classes that control the site. The public API is obeying access rights, but with programming rights you can go past them, inside our Java SPI. -- Sergiu Dumitriu http://purl.org/net/sergiu/ ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights in virtual wiki
Hi, don't know if thats another use case but at the moment i cant copy pages in the virtual wiki. It works in the main wiki and i tried in the virtual wiki with the global user and the local user. When i copy a page sucess message appears, but when i click the link for the new page, the page does not exist. Also the ImportPages Page of the Import/Export Application did not work when i imported it with the local user. Saved it with the global user and it worked. For me its not really transparent what works and what does not work. And its true that you don't need programming privileges for velocity but you need it when you access the restricted API with velocity. Well maybe its just a documentation issue:) hel. By the way XWiki 1.8 is great - hel. h...@hel.at -- View this message in context: http://n2.nabble.com/Programming-rights-in-virtual-wiki-tp2538608p2547324.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] Programming rights in virtual wiki
Hi, is there a way to give programming rights to a user in a virtual wiki? Thanks hel. - hel. h...@hel.at -- View this message in context: http://n2.nabble.com/Programming-rights-in-virtual-wiki-tp2538608p2538608.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights in virtual wiki
Hel-o, Only users registered on the main wiki can be granted programming access level. But they can save pages with the programming rights on sub wikis. Jerome. hel-o wrote: Hi, is there a way to give programming rights to a user in a virtual wiki? Thanks hel. - hel. h...@hel.at ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Programming rights
Vitantonio Messa wrote: Hi all, I have give to myself programming right on my xwiki (from the global rights section), but still, when I write $doc.hasProgrammingRights() or $context.hasProgrammingRights() I got false as response instead of true. Does anyone know where is my mistake? Thanks! Hi, Vitantonio I'd not tried this until you have posted this message, but I've been seeing some Groovy (at least) related issues while working with 1.2-milestone-1.5235 (some scripts didn't work at all, some syntaxes didn't work). I'm now using 1.2-SNAPSHOT.5607 and it looks like this was already solved. So, I've no answer to your question, but it is like this problem was solved in the path to the coming 1.2 release. Let's see what others say! Cheers, Ricardo -- Ricardo Rodríguez Your XEN ICT Team ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
