On 02/23/2010 10:54 AM, Stefan Bachert wrote:
>
> Hi,
>
> found out what went me wrong.
>
> I allowed viewing in the assigned user group, but I disabled viewing in the
> WikiAllGroup.
>
> It is surprising to me that the more general WikiAllGroup wins over the more
> specific assigned user group.

Deny rights are always stronger than allow rights. There is no group 
ordering, no notion of a "more specific" group.

> However, when the more specific user group is no more able to change the
> value when defined at WikiAllGroup, the checkbox should either be invisible
> or readonly to reflect the current state

No, that is not right, since there is no known relationship between two 
groups. XWikiAllGroup could be much larger than the smaller group, thus 
the allow right is not always ignored, it correctly applies for all the 
users that are in XWikiAllGroup and not in your specific group.

-- 
Sergiu Dumitriu
http://purl.org/net/sergiu/
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users

Reply via email to