[xwiki-users] [XWIKI] Restrict import/export
Hi, My project want me to restrict import/export function to authorized users (for instance a group). Is that possible? Indeed, it seems that having "view" rights automatically enable import/export rights. Thank you. -- Mon adresse THALES est antoine-b.tran@thalesgroup.com. +33 (0)5 62 88 84 40
Hi, On 10 Feb 2016 at 15:06:58, TRAN Antoine (antoine-b.tran@thalesgroup.com(mailto:antoine-b.tran@thalesgroup.com)) wrote:
Hi,
My project want me to restrict import/export function to authorized users (for instance a group). Is that possible? Indeed, it seems that having "view" rights automatically enable import/export rights. Thank you. —
- Import always require Admin permissions - XAR Export always requires Admin permissions - HTML Export is available to anyone who can view (the logic is that since they can view pages, why wouldn’t they be able to get them?) - PDF export is also available to anyone who can view (same logic I guess) To override this behavior the easiest is to forbid the /export/ action in the web server (apache, nginx, etc). There are others ways but they’re more complex. Thanks -Vincent
On Thu, Feb 11, 2016 at 10:35 PM, vincent@massol.net <vincent@massol.net> wrote:
Hi,
On 10 Feb 2016 at 15:06:58, TRAN Antoine (antoine-b.tran@thalesgroup.com(mailto:antoine-b.tran@thalesgroup.com)) wrote:
Hi,
My project want me to restrict import/export function to authorized users (for instance a group). Is that possible? Indeed, it seems that having "view" rights automatically enable import/export rights. Thank you. —
- Import always require Admin permissions
XAR import. Maybe Antoine is talking about office import ?
- XAR Export always requires Admin permissions - HTML Export is available to anyone who can view (the logic is that since they can view pages, why wouldn’t they be able to get them?) - PDF export is also available to anyone who can view (same logic I guess)
To override this behavior the easiest is to forbid the /export/ action in the web server (apache, nginx, etc). There are others ways but they’re more complex.
Thanks -Vincent
_______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
participants (3)
-
Thomas Mortagne -
TRAN Antoine -
vincent＠massol.net