Hi, I'm planning to do the following:
Each document based on a certain template autmatically gets it's own standard poll. (No customisation.) Each user visiting the page can vote. Having looked at the polls application and played around with templates a bit, I think I know all the ingredients I will need. I have one problem though: Anyone who votes needs write permissions on the document that saves the votes (whereever that may be). If I'm not mistaken that means anyone who can vote theoretically can manipulate voting data by accessing these objects directly. Is there any way to secure this against manipulation a) from users who can vote? b) from the user who created the page? Probably that question is equivalent to: Is there a way to let users save changes on an object only via a script while hindering that very same user from editing it directly? Any hints are greatly appreciated! _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
