On 5 Oct 2015 at 17:20:39, Eduard Moraru
([email protected](mailto:[email protected])) wrote:
> On Mon, Oct 5, 2015 at 3:37 PM, [email protected]
> wrote:
>
> >
> >
> > On 5 Oct 2015 at 14:33:11, Eduard Moraru ([email protected](mailto:
> > [email protected])) wrote:
> >
> > > Hello Keith,
> > >
> > > I see 2 possibilities here:
> > >
> > > 1) Is there any chance that, while you`ve executed the Distribution
> > Wizard,
> > > you might have missed (ignored) the document XWiki.XWikiPreferences? Or
> > > maybe you`ve chosen to keep all your changes? The point is that you
> > rights
> > > configuration (specifically the 'script' right section) for the
> > > XWikiAllGroup in Administration should look like in this screenshot [1]
> > > (from the 7.2 release notes [2]). The 'script' right is explicitly given
> > to
> > > all users so that the migration/upgrade behaves as before, until you
> > decide
> > > otherwise. Please check that the rights setup is properly upgraded.
> > >
> > > 2) The only other case I can think of is that you might have deleted the
> > > user that is set as last content author in (most of) your documents. If
> > > this is the case, then indeed the scripts will not be able to be executed
> > > since the user no longer exists (and thus can not own the 'script'
> > right).
> > > To fix this, you could recreate the previously deleted user and make sure
> > > he has the 'script' right.
> >
> > On this second point, does it mean that we cannot delete users anymore
> > because of this? That could be an issue…
> >
>
> How is this different from what we are doing with Programming Rights? If
> the author of the script is no more, then the script's credibility is no
> more, so it should not be executed.
The difference is that we use script macros everywhere (a lot more than PR) so
this makes it now completely impossible to remove any user who’s ever coded
using some script macros.
Thus I believe we need to brainstorm and find a solution as it’s becoming more
urgent now.
Some ideas:
* Don’t allow deleting users, just allow disabling them.
* When deleting a user, ask who’s becoming responsible for the content of that
author (ie associate the 2 ids) and when checking permissions, check using the
responsible user id.
* Before deleting a user warn about the consequences (for pages which have PRs
and Scripts) and recommend disabling the user instead. And wait for signed
scripts, hoping that it won’t take long before we implement it...
* Have a store for deleted users and use it when checking permissions
Thanks
-Vincent
> Thanks,
> Eduard
>
>
> >
> > Thanks
> > -Vincent
> >
> > > Please let us know if that helps.
> > >
> > > Thanks,
> > > Eduard
> > >
> > > ----------
> > > [1]
> > >
> > http://www.xwiki.org/xwiki/bin/download/ReleaseNotes/ReleaseNotesXWiki72/scriptRightsExplicitlyAllowedInXWikiPreferences.png
> > > [2]
> > >
> > http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki72#HScriptright
> > >
> > > On Mon, Oct 5, 2015 at 2:33 PM, Keith Davis
> > > wrote:
> > >
> > > > Yes, I did execute the Distribution Wizard.
> > > >
> > > > Keith Davis (214) 906-5183
> > > >
> > > > From: Vincent Massol [mailto:[email protected]] On Behalf Of
> > > > [email protected]
> > > > Sent: Monday, October 05, 2015 6:30 AM
> > > > To: XWiki Users
> > > > Cc: Keith Davis
> > > > Subject: Re: [xwiki-users] XWiki 7.2 - Velocity Script Errors
> > > >
> > > > Hi Keith,
> > > >
> > > > See
> > > >
> > http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki72#HScriptright
> > > >
> > > > Are you sure you’ve executed the Distribution Wizard? (because by
> > default
> > > > we give Script Rights to users).
> > > >
> > > > @Edy: I think we need some additional info in the Release Notes about
> > this.
> > > >
> > > > Thanks
> > > > -Vincent
> > > >
> > > > On 5 Oct 2015 at 13:25:08, Keith Davis ([email protected]
> > (mailto:
> > > > [email protected]))> > [email protected]))> wrote:
> > > >
> > > > > I tried to send this once, but it looks like it did not go through.
> > > > >
> > > > > I just upgraded from 7.1.2 to 7.2 and now it looks like none of the
> > > > Velocity scripts work. I ended up rolling back to 7.1.2, because it's
> > > > unusable in this state.
> > > > >
> > > > > org.xwiki.rendering.macro.MacroExecutionException: The execution of
> > the
> > > > [velocity] script macro is not allowed. Check the rights of its last
> > author
> > > > or the parameters if it's rendered from another script.
> > > >
> > > > [snip]
> >
> > _______________________________________________
> > users mailing list
> > [email protected]
> > http://lists.xwiki.org/mailman/listinfo/users
> >
> _______________________________________________
> users mailing list
> [email protected]
> http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users
