Hey there,
we have a lot of groups and users from LDAP on our XWiki instance. Due to legacy configuration, role mapping for groups can not be used in Keycloak.
When I have set a few custom rights for pages, the groups/users with permissions easily get lost in the long list sorted alphabetically.
I think it would be a big yet simple improvement to sort groups and users on top of the rights list when they have custom rights set in that context.
I don’t agree with the full idea. IMO we should keep the default the same, and create a toggle for this Last modified rights order.
Sure, this would also provide the option to see the list of modified rights.
Why would you call this Last modified rights instead of Modified rights? Since XWiki recommends to use implicit deny behavior, it is expected that most users set just a few rights on pages and only as much as needed in general.
“Last” implies that only rights that were modified in e.g. the last 2 weeks would be shown. It should be a complete list sorted by modified rights.
The proposal would only change the order as soon as changes were made. When a rights page is opened again, you have a quick overview who has rights set. You do not have to need to click through all list pages (this can become long) to check that.
Maybe a Modified rights option could be the default when opening a rights page? You could still have the option to switch back to alphabetical sorting.
We want the order to be deterministic and complete. I think it makes more sense to order by date than alphabetically if we already separate between modified/default rights so I assumed that’s what you were thinking of. Every right would be shown, starting by the ones updated recently. It seems we didn’t have the same idea after all.
Do you just not display the non-modified rights when this option is ON? I think it would be nice to still be able to add rights to new users even in the Modified rights mode. Keeping the non-modified rights would not impact much the user experience for your main use case and allow this UI state to be used in a more diverse context.
A Modified right default would probably feel quite inconsistent because of this 
1 Like
Sorry, I misunderstood the “Last” part and thought it would limit the displayed rights to a certain timeframe.
The proposal was only about sorting. I would definitely like to keep the other rights too.
If the “Last modified rights” option would be the default, it would be deterministic. The modified item would show up at the top of the rights list when changed.