On Thu, Feb 11, 2016 at 10:35 PM, vinc...@massol.net <vinc...@massol.net> wrote: > Hi, > > > On 10 Feb 2016 at 15:06:58, TRAN Antoine > (antoine-b.t...@thalesgroup.com(mailto:antoine-b.t...@thalesgroup.com)) wrote: > >> Hi, >> >> My project want me to restrict import/export function to authorized users >> (for instance a group). Is that possible? Indeed, it seems that having >> "view" rights automatically enable import/export rights. Thank you. >> — > > - Import always require Admin permissions
XAR import. Maybe Antoine is talking about office import ? > - XAR Export always requires Admin permissions > - HTML Export is available to anyone who can view (the logic is that since > they can view pages, why wouldn’t they be able to get them?) > - PDF export is also available to anyone who can view (same logic I guess) > > To override this behavior the easiest is to forbid the /export/ action in the > web server (apache, nginx, etc). There are others ways but they’re more > complex. > > Thanks > -Vincent > > _______________________________________________ > users mailing list > users@xwiki.org > http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne _______________________________________________ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
