Hi,
On 10 Feb 2016 at 15:06:58, TRAN Antoine (antoine-b.t...@thalesgroup.com(mailto:antoine-b.t...@thalesgroup.com)) wrote: > Hi, > > My project want me to restrict import/export function to authorized users > (for instance a group). Is that possible? Indeed, it seems that having "view" > rights automatically enable import/export rights. Thank you. > — - Import always require Admin permissions - XAR Export always requires Admin permissions - HTML Export is available to anyone who can view (the logic is that since they can view pages, why wouldn’t they be able to get them?) - PDF export is also available to anyone who can view (same logic I guess) To override this behavior the easiest is to forbid the /export/ action in the web server (apache, nginx, etc). There are others ways but they’re more complex. Thanks -Vincent _______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
