On Sat, Aug 21, 2010 at 12:10, Anca Luca <[email protected]> wrote:

> Hi Abel,
>
> what do you understand by "space that the user is not allowed to view"?
>

Well I guess he is referring to rights, because "blacklisted" spaces are
correctly displayed in the "space drop down list filter".


> You can have rights at space level, indeed, but you can also have rights
> at page level, which override the rights at space level and can grant a
> user view access to a page in a space he normally does not have view
> right for.
>
> A space a user is not allowed to view is a space for which user does not
> have the view right and, in addition, for which there is no page inside
> with rights that override the space rights and grant user view right? If
> so, then yes I would guess this is a bug, but I would also say it's a
> bit costly to check, because of the 'in deep' search.
>
> Otherwise, to implement it, it would be just editing the search form
> (Main.WebSearch) and, when populating the spaces list, check the rights
> on the space using hasAccessLevel functions in the XWiki api.
>
> Happy hacking,
> Anca
>
>
> On 08/21/2010 03:56 AM, Abel Solórzano Astorga wrote:
> > Hi,
> >
> > I have a question about the *space drop down list filter* on
> Main.WebSearch
> > page (You can see what I mean by *space drop down list filter *at
> > http://dl.dropbox.com/u/3688604/websearch-page.png). At the moment the
> drop
> > down list shows all the spaces, even the ones that the user is not allow
> to
> > view. I want to be able to show in that filter just the spaces that the
> > current user is allow to view. How can I achieve that?
> >
> > Thanks in advance!
> >
> > Regards,
> >
> > Abel
> > _______________________________________________
> > users mailing list
> > [email protected]
> > http://lists.xwiki.org/mailman/listinfo/users
> _______________________________________________
> users mailing list
> [email protected]
> http://lists.xwiki.org/mailman/listinfo/users
>
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users

Reply via email to