Rights of administrator created during setup are not reflected in Rights administration

Help / Discuss
1

During XWiki setup an administrator account is created.

I expected the rights assigned to this user to be reflected in the “Rights” administration of the wiki (Global Administration: Rights)

But the mentioned user is not member of “XWikiAdminGroup” and does not have any rights assigned on the user itself.

Did I miss something? Or the other way around: where are the rights assigned to this particular admin user created during setup?

Thank you

2

This user is actually set as owner in the wiki descriptor. This means indeed that right setup does not affect this user and that it cannot loose admin right (until you change the wiki owner).

In the admin you can find this in Wikis -> Descriptor.

3

Thank you @tmortagne
Expected something like this. In short there are two “invisible” right holders:

  • The wiki owner (full admin access to the Wiki and all sub wiki I assume)
  • The wiki superadmin enabled in xwiki.cfg if required
4

Added a hint to Basic rules

Please review

5

You could think about owner field as a configurable superadmin, that’s pretty much how the code interpret it.

Note that any main wiki admin get admin right on subwikis too (whatever right setup there is in this subwiki).

Looks good.

6

Be aware, that changing the initial configuration administrator (XWiki owner, owner of the first page ‘Home’/‘Startseite’ …) may lead to further complications mentioned in xWiki is broken - prop.owner changed and Delete Admin user by mistake.

I am fighting with this issue, because as a user of the wiki, I don’t want to have access to all resources. In the end, the admins should only have access to sensitive data together with one of the managing directors. That also corresponds to the four-eyes principle :wink:

How to set a “page owner” does not solve this issue.

While my initial configurator xwiki-user is deleted, there are a lot of entries in the postgresql-db in the table ‘xwikidoc’ relating to him.

I don’t know too much about xwiki at the moment, we are testing it since yesterday in a docker container - great work you all have done here!

I will come back to this topic again. I hope, I do not offend against the forum guidelines with my first reply. I just try to reconfigure my installation the right way. It would be easier to reinstall - but how does it help on the long run that way? :wink: