On Tue, Dec 16, 2008 at 12:41 AM, Peter Moran <[email protected]> wrote: > Hi Thomas, > > Thanks for the response. I am using XWiki Enterprise 1.6.1.13621. The > user has explicit edit right on its profile page, so the user appears > to have been created as expected (btw, I don't have an "Edit" -> > "Page access rights" menu option ?). > > In the logs, the following entry appears when I am using the > XWikiLDAPAuthServiceImpl. This does _not_ appear when using the > "classic" authentication. Is this relevant? Any suggestions welcome. > > 10:22:31,930 > [http://myserver/xwiki/bin/edit/XWiki/tester?xpage=changemyavatar] > [TP-Processor2] INFO xwiki.XWikiAuthServiceImpl - User > xwiki:XWiki.tester is authentified > 10:22:31,931 > [http://myserver/xwiki/bin/edit/XWiki/tester?xpage=changemyavatar] > [TP-Processor2] INFO xwiki.XWikiRightServiceImpl - Access has > been denied for (xwiki:XWiki.tester,XWiki.tester,delete): global level > (delete right must be explicit)
Hmm so the problem seems to be delete and not edit, which should not be needed for profile edition. I will look into this. Is the user has explicit delete right with classical authentication ? > > Thanks, > Peter > > > On Tue, Dec 16, 2008 at 2:36 AM, Thomas Mortagne > <[email protected]> wrote: >> On Mon, Dec 15, 2008 at 12:59 PM, Peter Moran >> <[email protected]> wrote: >>> I have a user as a member of the XWikiAllGroup. When using the default >>> authentication class, she is able to change her profile photo. When I >>> use the XWikiLDAPAuthServiceImpl authclass to integrate with LDAP, she >>> gets a permission error "You are not allowed to view this document or >>> perform this action" when trying to change her photo. Are there any >>> differences in how this permission is handled across the auth service >>> implementations, or is it likely to be an LDAP group configuration >>> error? >> >> XWikiLDAPAuthServiceImpl use the same methods as the "classical" XWiki >> authentication to create a new user so you should have the same right >> configuration on the user profile. >> >> Then it add some more informations and synchronize groups membership >> but this part does not touch the user profile. >> >> Which version of XWiki are you using ? >> Is the user has explicit edit right on its profile page (use the >> "Edit" -> "Page access rights" UI) ? >> >>> >>> Thanks, >>> Peter >>> _______________________________________________ >>> users mailing list >>> [email protected] >>> http://lists.xwiki.org/mailman/listinfo/users >>> >> >> >> >> -- >> Thomas Mortagne >> _______________________________________________ >> users mailing list >> [email protected] >> http://lists.xwiki.org/mailman/listinfo/users >> > _______________________________________________ > users mailing list > [email protected] > http://lists.xwiki.org/mailman/listinfo/users > -- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
