Uploaded image for project: 'JSPWiki'
  1. JSPWiki
  2. JSPWIKI-1067

View-only ACLs are not enforced

Bulk Copy AttachmentsBulk Move AttachmentsVotersWatch issueWatchersConvert to sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    Description

      Group AllUsers being User1,User2

      for a page that contains
      [

      {ALLOW view AllUsers}

      ]
      [

      {ALLOW edit User1}

      ]

      when User2 displays this page for the first time, there is not 'Edit' button and he cannot edit the page (as intended).
      Press reload, and 'Edit' button appears. User2 can now edit the page.

      Attachments

        Issue Links

        is duplicated by

        Bug - A problem which impairs or prevents the functions of the product. JSPWIKI-1039 ACLs are not taken into account when cache is disabled

        • Critical - Crashes, loss of data, severe memory leak.
        • Closed

        Bug - A problem which impairs or prevents the functions of the product. JSPWIKI-1047 Access Control Lists do not work if page cache is deactivated

        • Minor - Minor loss of function, or other problem where easy workaround is present.
        • Closed

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            Unassigned Unassigned
            rv Harvey Echain
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment