Henning Sprang wrote:
> On Fri, Feb 20, 2009 at 9:46 AM, Vincent Massol <[email protected]> wrote:
>> One easy solution I can think of would be to prevent access to them by
>> configuring your web server to deny some actions (*/export/.....).
>
> O.K. we'll do that if we need it fast and the other way is taking too long.
>
>> Apart from this you would have to modify some java code (the Action
>> classes code).
>
> That's probably what we're going to do then. I have to look at the
> code sooner or later anyway for the other export stuff.
The rights system is not modular yet, so you will have to change one
java class.
Look at
xwiki-core/src/main/java/com/xpn/xwiki/user/impl/xwiki/XWikiRightServiceImpl.java,
around line 106, there should be a line like:
actionMap.put("pdf", "view");
and around line 115:
actionMap.put("export", "view");
A quick solution is to replace "view" with "admin". A better solution is
to replace "view" with "export", but then you will have to also change
other java code and some skin files.
--
Sergiu Dumitriu
http://purl.org/net/sergiu/
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
