XWiki Standard 9.8.1 Documentation » Rights Overview » Set the Group Access Rights

Set the Group Access Rights

Set the Rights for Global Groups at Wiki Level

Global groups are created on the main wiki and any rights granted to them will also apply for the sub-wikis.

You might need to grant explicit rights for global groups on a sub-wiki in one of the following cases:

  • the wiki only has global users
  • the wiki has both global and local users

This configuration option is set when creating the wiki, but it can be easily changed at a later time.

To set the access rights for a global group, you need to be the wiki owner or an administrator. Click the DrawerMenuIcon.png button to open the drawer menu, then click on "Administer Wiki".

AdministerWikiMenu.png

In the wiki administration page, click on "Users & Rights" -> "Rights" in the accordion menu to the left to bring up an overview of group rights.

AdministrationRights.png

On a sub-wiki, the livetable displays the local groups by default, so you will need to switch to "Global" in the "Search scope":

Sub-Wiki
GlobalGroupsRightsSubWiki.png

Click the check-box once to grant a right, twice to deny it and three times to clear the right and use the default values. Note that rights entries are saved automatically.

Main Wiki
GroupRights.png

In both cases, you will notice a new "Script" right which was introduced in order to allow controlling who has the right to write scripts. Anyone with edit rights can write a script in a wiki page. However, when the page is rendered, the script will only execute if the last author of the page has the "Script" right.

For backward-compatibility reasons, the standard XWiki distribution comes with the "Script" right being allowed for all users at the main wiki level. So, unless an administrator explicitly revokes the right for some users or groups, they will be able to execute the scripts they wrote.

Set the Rights for Local Groups at Wiki Level

The access rights for local groups can only be set on the sub-wiki they were created on. Local groups are created on sub-wikis that support:

  • only local users
  • both local and global users

To set the access rights for local groups, go to a sub-wiki and log in as administrator. Next, click the DrawerMenuIcon.png button, then click on "Administer wiki" to go to the wiki preferences page.

Click on "Users & Rights" -> "Rights" in the accordion menu to the left to bring up an overview of group rights.

AdministrationRights.png

Click the check-box once to grant a right, twice to deny it and three times to clear the right and use the default values.

LocalGroupRightsSubWiki.png

Set the Group Access Rights at Page Level

In order to set the access rights only for a nested page or a terminal page, please refer to this documentation.

The rights set at page level override the rights for its parent page, which override the rights for a wiki. Also, when a right has been allowed at a given level, it gets explicitly denied to anyone else at the same level. 

You can read about permission types on the dedicated documentation page. Also, to learn more about the local and global groups, please follow this link.

   

Related Pages

Search this space

 

Most popular tags

Failed to execute the [groovy] macro
  1. access rights
  2. activity stream
  3. annotation
  4. attachment
  5. comment
  6. Document Tree Macro
  7. export
  8. Extension Manager
  9. Flamingo skin
  10. global user
  11. Groovy event listener
  12. group
  13. nested page
  14. search
  15. skin
  16. syntax
  17. user
  18. user profile
  19. velocity macros
  20. wiki
  21. wysiwyg
  22. XWiki Applications
  23. xwikiattachment_archive table
  24. xwikiattachment table
  25. xwikiattrecyclebin table
  26. xwikiproperties table

[Display all tags from this space]