XWiki Enterprise 8.4.4 Documentation » Rights Overview » Set the Wiki Access Rights

Set the Wiki Access Rights

Set the Main Wiki Access Rights

To change rights for the main wiki, log in as administrator, click the DrawerMenuIcon.png button to open the drawer menu, then click on "Administer Wiki".

AdministerWikiMenu.png

In the wiki administration page, click on the "Rights" link from the vertical menu to the left. 

AdministrationRights.png

Next, select the users or groups for which you want to set a permission. Note that if you are on the main wiki, you are editing the rights for global users and groups. To know more about the difference between local and global users and groups, follow this link.

GroupRights.png

Click once on a check-box to allow a right, twice to deny it and three times to clear the right and use the default values. Note that rights entries are saved automatically.

Starting with version 7.2, a new "Script" right has been added to control who has the right to write scripts. Anyone with edit rights can write a script in a wiki page. However, when the page is rendered, the script will only execute if the last author of the page has the "Script" right.

For backward-compatibility reasons, the standard XWiki Enterprise distribution comes with the "Script" right being allowed for all users at the main wiki level. So, unless an administrator explicitly revokes the right for some users or groups, they will be able to execute the scripts they wrote.

More information about permission types are available in the dedicated documentation page.

Set the Sub-Wiki Access Rights

To change rights for a sub-wiki, log in as administrator, click the DrawerMenuIcon.png button, then on "Administer Wiki".

AdministerSubWikiMenu.png

In the wiki preferences page, click on the "Rights" link in the vertical menu to the left.

AdministrationRights.png

Select the local or global groups and users for which you want to set a permission.

AdminGroupsRightsSubWiki.png

Click once on a check-box to allow a right, twice to deny it and three times to clear the right and use the default values. Note that rights entries are saved automatically.

Unlike the main wiki, the "Script" right is set to default on sub-wikis, meaning that it is denied.

Default Values for Rights at Main Wiki Level

When a right has been allowed at a given level, it gets explicitly denied to anyone else at the same level.
 Wiki Right Default Value Comments
VIEWALLOWED
EDITALLOWEDEDIT rights at wiki level also imply VIEW rights
COMMENTALLOWED
DELETEDENIED
SCRIPTALLOWED
REGISTERALLOWED
ADMINDENIED
  • ADMIN rights at wiki level also imply the VIEW, EDIT, COMMENT, DELETE and REGISTER rights.
  • If ADMIN rights are granted at wiki level, they cannot be denied at page level.
  • The rights implied by ADMIN rights will not be overridden by a denial at a lower level.
PROGRAMDENIED
  • Programming rights can only be set in the main wiki.
  • PROGRAMMING rights at wiki level also imply VIEW, EDIT, COMMENT, DELETE, REGISTER and ADMIN rights.
  • If PROGRAMMING rights are granted at wiki level, they cannot be denied at page level.   
CREATE WIKIDENIEDThe rights to create wiki can only be granted via the main wiki.

Default Values for Rights at Sub-wiki Level

When a right has been allowed at a given level, it gets explicitly denied to anyone else at the same level.
 Wiki Right Default Value Comments
VIEWALLOWED
EDITALLOWEDEDIT rights at wiki level also imply VIEW rights
COMMENTALLOWED
SCRIPTDENIED
DELETEDENIED
ADMINDENIED
  • ADMIN rights at wiki level also imply the VIEW, EDIT, COMMENT and DELETE rights.
  • If ADMIN rights are granted at wiki level, they cannot be denied at page level.
  • The rights implied by ADMIN rights will not be overridden by a denial at a lower level.

  

Search this space