Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 71a6f317c62e5f9a8d44758d67915e06e5369c2b https://github.com/xwiki/xwiki-platform/commit/71a6f317c62e5f9a8d44758d67915... Author: Vincent Massol <vincent@massol.net> Date: 2026-08-25 (Tue, 25 Aug 2026) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/api/Property.java A xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/api/PropertyTest.java Log Message: ----------- [Misc] Only check the programming right when reading a sensitive object property (#5967) Property#getValue() evaluated the programming right before looking at the property, even though a property that is not sensitive returns the same value with and without that right. As a result every $object.getValue('field') call in wiki content triggered a full authorization evaluation whose outcome was discarded, and made those pages appear to require the programming right to the functional test checker. Testing the sensitivity first (a lookup in the already loaded XClass) restores the same behaviour for every combination while sparing the authorization evaluation to all the properties that are never sensitive. It also removes a second, redundant programming right check that getProperty() was performing on the privileged branch. To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications