Hi,

We need to modify 
http://platform.xwiki.org/xwiki/bin/view/Features/RightsManagement 
  to explain this. I think Jerome is working on this.

Basically when you allow a right to a group it means the other groups  
won't have it allowed unless you explicitely allow them.

I don't full remember the rationale behind this, maybe Sergiu or  
Ludovic can help here. That said I do agree it's not self explicit and  
I'd be for changing that although that would be a big change (we need  
to discuss it for when we're going to rewrite the authorization module).

Thanks
-Vincent

On Dec 6, 2008, at 3:10 AM, Nick Watts wrote:

> I'm using XWiki Enterprise version 1.6.1.13621.  I was following the
> instructions in the FAQ to forbid registration (
> http://www.xwiki.org/xwiki/bin/view/FAQ/HowCanIForbidRegistration,  
> which
> seems to be out-of-date for my version BTW) and noticed some strange
> behavior.  I don't want anyone to self-register so I denied access  
> in the
> "Register" column of the "Rights" admin page for all groups.  I  
> logged out
> and noticed the register link was still on the page.  I tried  
> registering a
> fake user and it worked.  After playing around for a while I figured  
> out
> that I had to actually grant Register access for the XWikiAdminGroup  
> group
> to get the Register link to disappear.  If I deny Register access or  
> just
> leave it blank for the XWikiAdminGroup group the Register link is  
> present
> and works.  This is backwards to me.  Without looking at the code it  
> seems
> like a logical error somewhere.  Could someone tell me whether I'm
> understanding this process correctly or not?
>
> -- 
> Nick Watts
> blog: thewonggei.wordpress.com


_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users

Reply via email to