Different permission for different groups

[panjie]

I want set PAGEA only could be seen by a group of users, say GROUPA.
So, I denied the view right for XWikiAllGroup, and explicitly give the right of view to GROUPA.

While, still users of GROUPA could not see PAGEA. This must be a conflict of GROUPA and XWikiAllGroup. But how could I resolve it? Should I remove all users of GROUPA from XWikiAllGroup? But it is said to be a best practice that all users should stay in XWikiAllGroup.

[panjie]

I found solution here:

Permissions ordering: By design?

I have an XWiki instance that uses groups as users for sub-pages under the home page. The home page is read only and can be seen by everyone, but each group has their own sub-pages under the home page. To achieve this, I allow Edit permission for all of the groups on the home page, but deny Edit for XWikiAllGroup (we use xwiki.authentication.group.allgroupimplicit=1 in xwiki.cfg - there are no unauthenticated users). Like this: [image] I recently added a new group, added a user to it, and gr…