Folder not visible after content migration

[lklein]

Hello everyone

I have now migrated our Xwiki instance to Xwiki 17.3 and I users have noticed that one important folder of our documentation is missing.
However for my Administrator User the Folder is accessible and browsable. For Users it is not visible in the Navigation Panel and cannot be opened with a direct link either. This to me hints towards a permission issue.

So, I checked the permission. I did notice that upon import, the permission of the Page was this:

Since during the migration we switched from LDAP authentication to OIDC authentication, nearly all Wiki Groups were invalidated and I was redoing the permission system.

So I changed the permissions to this:

However, the Users still do not have any access to the pages. I tried moving the files somewhere else and that is where I noticed something interesting.
During the moving process, the Pages were accessible to the users as they were supposed to be. After finishing the moving process, the pages were inaccessible again.

Can anyone help me out here?

[lklein]

Small update on this topic here:
I tried reimporting the page without the WebPreferences file where the permissions were set. This yielded no improvement.

Then I tried creating the root page with the permissions by hand and import the child pages. Now the root page of that directory is visible to users, however the child pages continue to be visible only to administrators. In the WebPreferences of the child pages, no restricting permissions are configured.

[lklein]

Another update:
I noticed that the old wiki instance has set a deny rule for groups that did not exist in the new instance anymore. I did remove all deny permissions in the old wiki, exported the content and then reimported it to the new wiki.

Now, the permissions were set correctly to begin with, but non-administrators still cannot see the pages.

I granted rights to the affected pages explicitly, but even then, users cannot see those pages. I also checked wiki wide rules to check if there was something denying it, but I only found settings that were correct there. Anyways, as far as I have read into the permissions structure, the wiki-wide permissions should be overridden by the page-specific permissions.

As of now, I have no idea what else I could try to fix this issue. It is highly important that the files are accessible for our users.

[Simpel]

To see what rights are set you can use this snippet: https://snippets.xwiki.org/xwiki/bin/view/Extension/List%20all%20rights%20(XWikiRights%20and%20XWikiGlobalRights)/

That could be your first step.

[lklein]

Thanks for your reply @Simpel

I have run that Macro and checked the permissions for that page (I removed some information that I cannot share in this forum):

The Permissions show some Groups that only existed in the “old” Wiki instance.
Basically the only groups that exist in the current wiki are:

• WIKI-Users (This is the group that grants users permissions to log in and view all of the other pages)
• XWikiAdminGroup (Builtin administrator group. Members of this group can currently actually see the pages)
• Lukas Klein (my user. However, while available under the same URL, it is a different user object than pre migration since we switched our authentication from LDAP to OIDC)

[lklein]

Another small update:
I completely deleted all permissions by deleting the WebPreferences Subpage. Then I set the permissions again. The only permissions set is this:

However, members of the WIKI-Users group still do not have access to the page

[lklein]

I found a workaround to the problem with a colleague.
We did the following:

1. We granted permissions to the WIKI-Users group to the missing page only (not the subpages)
2. Then we went to each direct child of that page and granted permissions to the WIKI-Users group to the page and its children.
3. Now the page is visible. I suspect that something with the cascading permissions is still broken, but it does not affect the users.