Yes, this is the expected behaviour. The rationale behind this is that users with "Programming" right can add scripting content to pages that does not need to pass the usual permission checks; this is sometimes necessary for some "advanced" UI operations. As a consequence every user with "Programming" rights can give itself also Admin rights by writing scripted content that just does so. This makes it pointless not to give then admin rights as well.
More in this on the permission reference page: http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Permission+types/ Cheers Clemens On 09/28/2016 05:01 PM, simmsj wrote: > I was testing with a few user accounts and found that users in a specific > group had admin rights even though they weren't in the XWikiAdminGroup and > the group they were in did not have Admin rights checked. After some trial > and error I found that removing the Program right removed Admin rights as > well. > > Is this the expected behavior? I just upgraded to 8.2.1, but this might have > been the case before and I just hadn't noticed. > > Thanks, > Jared > > > > -- > View this message in context: > http://xwiki.475771.n2.nabble.com/Program-Admin-Expected-Behavior-tp7601420.html > Sent from the XWiki- Users mailing list archive at Nabble.com. > _______________________________________________ > users mailing list > users@xwiki.org > http://lists.xwiki.org/mailman/listinfo/users > _______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
