> 
> On 1 Oct 2015 at 08:51:01, vinc...@massol.net
> (vinc...@massol.net(mailto:vinc...@massol.net)) wrote:
> 

> > I’m ok on
> my side to allow Owner to be able to use the “Always on
> this wiki” visibility for JSX/SSX.
> Allowing PR is another matter and
> I’m -1 for that, it’s too dangerous. With PR you can do
> anything: hack the OS, delete all the wikis of the farm, etc
> (voluntarily or not!).

Yes I'm agree with you. It's too dangerous for groovy code and JAR...
But are there same risk if you allow only full velocity code+xwiki API?
(I don't know if some methods need PR anyway)


_______________________________________________
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Reply via email to