Wiki source code of Access Rights

Version 6.3 by Joel on 2010/03/04

Show last authors
1 {{info}}
2 This page is being reworked now, therefore don't change here anything, see the current [[Draft>>http://dev.xwiki.org/xwiki/bin/view/Drafts/Access Rights]].
3 {{/info}}
4
5 This page aims at explaining how access rights work in XWiki. It will help you configure access rights on your wiki so that every user can only see and do what he should be allowed to.
6
7 = An overview of rights =
8
9 Here is a lists of all the rights available in XWiki Enterprise and their default setting.
10
11 * //**Right name:** brief description of the right//
12 ** //Availability: at what level can you set this right?//
13 *** //Page: this right can be set at the page level//
14 *** //Space: this right can be set at the space level//
15 *** //Wiki: this right can be set at the wiki level//
16 ** //Default status: is the right allowed or denied when the checkbox is left blank?//
17 *** //ALLOWED: this means that users CAN perform the given action if no other right is set//
18 *** //DENIED: this means that users CANNOT perform the given action if no other right is set//
19 ** //Priority order: which setting wins over another if an user has 2 different settings?//
20 ** //Checking order: at what level is the right checked first?//
21 * **View:** whether users can see the page
22 ** Availability:
23 *** Page
24 *** Space
25 *** Wiki
26 ** Default status: ALLOWED
27 ** Priority order: deny > allow > no setting
28 ** Checking order: page > space > wiki
29 * **Comment:** whether users can add a comment to the page
30 ** Availability:
31 *** Page
32 *** Space
33 *** Wiki
34 ** Default status: ALLOWED
35 ** Priority order: deny > allow > no setting
36 ** Checking order: page > space > wiki
37 * **Edit:** whether users can edit and save modifications to the page
38 ** Availability:
39 *** Page
40 *** Space
41 *** Wiki
42 ** Default status: ALLOWED
43 ** Priority order: deny > allow > no setting
44 ** Checking order: page > space > wiki
45 * **Delete:** whether users can delete the page
46 ** Availability:
47 *** Page
48 *** Space
49 *** Wiki
50 ** Default status: DENIED (unless you're the document creator)
51 ** Priority order: deny > allow > no setting
52 ** Checking order: page > space > wiki
53 * **Admin:** whether users can manage administration settings for the space / wiki
54 ** Availability:
55 *** Space (Automatically includes the view, comment, edit, delete rights)
56 *** Wiki (Automatically includes the view, comment, edit, delete, register, program rights)
57 ** Default status: ALLOWED
58 ** Priority order: allow > deny > no setting
59 ** Checking order: wiki > space
60 * **Register:** whether users can create new user accounts
61 ** Availability:
62 *** Wiki
63 ** Default status: ALLOWED
64 ** Priority order: allow > deny > no setting
65 ** Checking order: wiki
66 * **Program:** whether users can use protected APIs & Groovy code in wiki pages
67 ** Availability:
68 *** Wiki
69 ** Default status: DENIED
70 ** Priority order: allow > deny > no setting
71 ** Checking order: wiki
72
73 = Execution order =
74
75 [[The full answer lies in the code.>>http://svn.xwiki.org/svnroot/xwiki/platform/core/trunk/xwiki-core/src/main/java/com/xpn/xwiki/user/impl/xwiki/XWikiRightServiceImpl.java]]

Get Connected