There are 3 comments.
 
 
XWiki Platform / cid:jira-generated-image-avatar-b30be692-3038-4755-80fd-0b3ee7974eca XWIKI-182 Open

Add authorization for custom object modification

 
View issue   ยท   Add comment
 

3 comments

 
cid:jira-generated-image-avatar-73c0a4c1-eea3-4bf9-89c3-d2f6e2d2ce6a Vincent Massol on 29/Jan/26 13:22
 

Note that it's possible to implement an Event Listener to prevent modifying some xobjects (as it's done by the RightsFilterListener).

 
cid:jira-generated-image-avatar-73c0a4c1-eea3-4bf9-89c3-d2f6e2d2ce6a Vincent Massol on 29/Jan/26 13:22
 
Note that it's possible to implement an Event Listener to prevent modifying some xobjects (as it's done by the [RightsFilterListener|https://github.com/xwiki/xwiki-platform/blob/2557813aef3b863988d6cca58de996e207086898/xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authorization/xwiki-platform-security-authorization-bridge/src/main/java/org/xwiki/security/authorization/internal/RightsFilterListener.java#L63]).

Maybe this is enough and this issue could be closed?
 
cid:jira-generated-image-avatar-73c0a4c1-eea3-4bf9-89c3-d2f6e2d2ce6a Vincent Massol on 29/Jan/26 13:31
 

Even if the Event Listener solution works, it's a technical solution, for developers. We might also need a solution for end users.