Opened 11 years ago
Last modified 11 years ago
#10957 closed defect
User with WIKI_CREATE can't create a wiki page unless they also have WIKI_MODIFY — at Initial Version
Reported by: | Owned by: | ||
---|---|---|---|
Priority: | normal | Milestone: | 1.0.2 |
Component: | wiki system | Version: | 1.0-stable |
Severity: | normal | Keywords: | permissions |
Cc: | Branch: | ||
Release Notes: | |||
API Changes: | |||
Internal Changes: |
Description
If a user has WIKI_CREATE
but not WIKI_MODIFY
, any non-existent page will contain text suggesting that a page can be created, but the create page button is not present, so the text is in fact misleading.
User Action ------------------------------ anonymous BROWSER_VIEW anonymous CHANGESET_VIEW anonymous FILE_VIEW anonymous LOG_VIEW anonymous MILESTONE_VIEW anonymous REPORT_SQL_VIEW anonymous REPORT_VIEW anonymous ROADMAP_VIEW anonymous SEARCH_VIEW anonymous TICKET_VIEW anonymous TIMELINE_VIEW anonymous WIKI_CREATE anonymous WIKI_VIEW authenticated TICKET_CREATE authenticated TICKET_MODIFY authenticated WIKI_CREATE authenticated WIKI_MODIFY
Second, it is confusing that WIKI_CREATE
without WIKI_MODIFY
does not actually allow the user to do anything. The user cannot create a page unless they also have WIKI_MODIFY
. This could be dealt with in at least two possible ways:
WIKI_CREATE
grantingWIKI_MODIFY
.WIKI_CREATE
actually allowing pages to be created but not edited after creation.
Is there really a use case for which a user should be able to create pages but not modify them? I tend to think that WIKI_CREATE
should grant WIKI_MODIFY
.
Patch is forthcoming.