Notification reports unknown user for XWikiGuest edited page (group page)

[watery]

Today a new user has logged in in our XWiki (14.10.5) - he belongs to a group with no rights at all.

While the User group page has been modified by XWikiGuest:

the corresponding notification reports him as Unknown user:

[surli]

Hi,

yes that’s actually how we display the guest users in notifications, as obviously we don’t know which user it is in such case so it’s unknown user. What would you have expected?

Note that there’s a related ticket opened for a while, but was a bit more specific usecase: Loading...

[watery]

Saw it.

Well, it’s perfectly fine to have a dedicated user that gathers actions for non-registered / anonymous useres, but here I’m talking about an administrative / settings / permissions-related page, that moreover is changed upon user login, I think it should be handled by a different user from the one that holds anonymous page comments.

To tell it all, I find a bit strange too that the just logged in user is the same user that updates his own user page - our XWiki is connected to LDAP so the user page fields are updated on each access - I could see another spot for a service user here, especially if the user has no rights at all on the instance.
I need to check this twice, but as I reported in this post the user can’t view nor edit his profile page, yet he edited the page:

How to investigate permission issues (navigation panel not loading)

I just spotted another strange thing. This is the user profile page, opened from the user session. The page title isn’t rendered, but holds the LDAP username instead; though the Created and Last modified user names are correctly rendered. And the page is empty, although is this user page (but this may make sense given that no permission are given around). [immagine] Strangely, there’s no “Loading…” in the navigation panel, here. and the only request that ends in error is http://<host>:8080…

[surli]

@watery

here I’m talking about an administrative / settings / permissions-related page, that moreover is changed upon user login, I think it should be handled by a different user from the one that holds anonymous page comments.

Ok my bad I thought your issue was about the notification, not the fact that the group was saved by guest user.

@watery

our XWiki is connected to LDAP so the user page fields are updated on each access

So that’s probably something to report to the LDAP extension, maybe @tmortagne would know more on that.

[tmortagne]

@watery

the user can’t view nor edit his profile page

Are you sure about that ? The reason why the user is reported as being the one who created his profile is that he is set as the creator of the page specifically to get special creator rights (which is that he can always edit/see his profile page). And that’s not an LDAP authenticator thing, it’s the same with standard register.

[watery]

@surli

Ok my bad I thought your issue was about the notification, not the fact that the group was saved by guest user.

No problem, that was useful to understand a bit of XWiki inner workings (I didn’t know there was such an usage for that special user)

@tmortagne

Are you sure about that ? The reason why the user is reported as being the one who created his profile is that he is set as the creator of the page specifically to get special creator rights (which is that he can always edit/see his profile page). And that’s not an LDAP authenticator thing, it’s the same with standard register.

No, I’m not, I hadn’t our instance available when posting I’ll verify as soon as I have time, I just wanted to elaborate on my initial post. Thanks.