Uploaded image for project: 'JSPWiki'
  1. JSPWiki
  2. JSPWIKI-702

Auth: Users only with modify permission may create pages

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Critical
    • Resolution: Duplicate
    • 2.8.3, 2.8.4
    • None
    • None

    Description

      grant principal com.ecyrd.jspwiki.auth.authorize.Role "Anonymous" {
      permission com.ecyrd.jspwiki.auth.permissions.PagePermission ":", "modify";
      // permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", "createPages";
      };

      With these settings, Anonymous may create pages!

      grant principal com.ecyrd.jspwiki.auth.authorize.Role "Anonymous" {
      // permission com.ecyrd.jspwiki.auth.permissions.PagePermission ":", "modify";
      // permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", "createPages";
      };

      Works as it should: Anonymous may neither create nor modify pages.

      grant principal com.ecyrd.jspwiki.auth.authorize.Role "Anonymous" {
      // permission com.ecyrd.jspwiki.auth.permissions.PagePermission ":", "modify";
      permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", "createPages";
      };

      Well, since there isn't any possibility of creating a page without editing it AFAIK, this setting also seems to work as it should: Seems to be the same like the second case.

      The changes listed above are the only changes I did to the file I checked out from the svn repository.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              florianh Florian Holeczek
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: