Yes, this is the expected behaviour.

 The rationale behind this is that users with "Programming" right can add 
scripting content to pages
that does not need to pass the usual permission checks; this is sometimes 
necessary for some "advanced" UI operations.
 As a consequence every user with "Programming" rights can give itself also 
Admin rights by writing scripted content that just does so.
This makes it pointless not to give then admin rights as well.

More in this on the permission reference page:


On 09/28/2016 05:01 PM, simmsj wrote:
> I was testing with a few user accounts and found that users in a specific
> group had admin rights even though they weren't in the XWikiAdminGroup and
> the group they were in did not have Admin rights checked. After some trial
> and error I found that removing the Program right removed Admin rights as
> well. 
> Is this the expected behavior? I just upgraded to 8.2.1, but this might have
> been the case before and I just hadn't noticed.
> Thanks,
> Jared
> --
> View this message in context: 
> Sent from the XWiki- Users mailing list archive at
> _______________________________________________
> users mailing list
users mailing list

Reply via email to