Edgewall Software

Opened 11 years ago

Last modified 11 years ago

#10957 closed defect

User with WIKI_CREATE can't create a wiki page unless they also have WIKI_MODIFY — at Initial Version

Reported by: Ryan J Ollos <ryan.j.ollos@…> Owned by:
Priority: normal Milestone: 1.0.2
Component: wiki system Version: 1.0-stable
Severity: normal Keywords: permissions
Cc: Branch:
Release Notes:
API Changes:
Internal Changes:

Description

If a user has WIKI_CREATE but not WIKI_MODIFY, any non-existent page will contain text suggesting that a page can be created, but the create page button is not present, so the text is in fact misleading.

User           Action         
------------------------------
anonymous      BROWSER_VIEW   
anonymous      CHANGESET_VIEW 
anonymous      FILE_VIEW      
anonymous      LOG_VIEW       
anonymous      MILESTONE_VIEW 
anonymous      REPORT_SQL_VIEW
anonymous      REPORT_VIEW    
anonymous      ROADMAP_VIEW   
anonymous      SEARCH_VIEW    
anonymous      TICKET_VIEW    
anonymous      TIMELINE_VIEW  
anonymous      WIKI_CREATE    
anonymous      WIKI_VIEW      
authenticated  TICKET_CREATE  
authenticated  TICKET_MODIFY  
authenticated  WIKI_CREATE    
authenticated  WIKI_MODIFY

Second, it is confusing that WIKI_CREATE without WIKI_MODIFY does not actually allow the user to do anything. The user cannot create a page unless they also have WIKI_MODIFY. This could be dealt with in at least two possible ways:

  • WIKI_CREATE granting WIKI_MODIFY.
  • WIKI_CREATE actually allowing pages to be created but not edited after creation.

Is there really a use case for which a user should be able to create pages but not modify them? I tend to think that WIKI_CREATE should grant WIKI_MODIFY.

Patch is forthcoming.

Change History (1)

by Ryan J Ollos <ryan.j.ollos@…>, 11 years ago

Attachment: WikiCreateOnly.png added
Note: See TracTickets for help on using tickets.