Hi, We need to modify http://platform.xwiki.org/xwiki/bin/view/Features/RightsManagement to explain this. I think Jerome is working on this.
Basically when you allow a right to a group it means the other groups won't have it allowed unless you explicitely allow them. I don't full remember the rationale behind this, maybe Sergiu or Ludovic can help here. That said I do agree it's not self explicit and I'd be for changing that although that would be a big change (we need to discuss it for when we're going to rewrite the authorization module). Thanks -Vincent On Dec 6, 2008, at 3:10 AM, Nick Watts wrote: > I'm using XWiki Enterprise version 1.6.1.13621. I was following the > instructions in the FAQ to forbid registration ( > http://www.xwiki.org/xwiki/bin/view/FAQ/HowCanIForbidRegistration, > which > seems to be out-of-date for my version BTW) and noticed some strange > behavior. I don't want anyone to self-register so I denied access > in the > "Register" column of the "Rights" admin page for all groups. I > logged out > and noticed the register link was still on the page. I tried > registering a > fake user and it worked. After playing around for a while I figured > out > that I had to actually grant Register access for the XWikiAdminGroup > group > to get the Register link to disappear. If I deny Register access or > just > leave it blank for the XWikiAdminGroup group the Register link is > present > and works. This is backwards to me. Without looking at the code it > seems > like a logical error somewhere. Could someone tell me whether I'm > understanding this process correctly or not? > > -- > Nick Watts > blog: thewonggei.wordpress.com _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
