moin icon indicating copy to clipboard operation
moin copied to clipboard

default namespace ACL must include create if other namespace allows create

Open RogerHaase opened this issue 7 months ago • 0 comments

If wikiconfig.py has ACL for NAMESPACE_USERS:

default='All:read,write,create,destroy,admin',

and ACL for NAMESPACE_DEFAULT:

default='All:read,write',

then a user who is not logged in may read/modify/destroy/admin (change ACL on modify) an item in users namespace. But same user may not create an item in users namespace. Attempts to do so result in:

Item not found

Item 'xxx' does not exist.

Workaround is to change ACL for NAMESPACE_DEFAULT:

default='All:read,write,create',

RogerHaase avatar Jul 02 '24 22:07 RogerHaase