Hello everyone,
I have a question. In our XWiki installation we use the XWikiAllGroup. All our employees are included there. After some trial and error, I’ve noticed that somehow the rights management isn’t working properly.
We have an area Z_Draft because of the PublicationWorkflow. This area contains unpublished documents. With the permissions of the XWikiAllGroup it is also not possible to see the area in the navigation on the left.
However, if you use the XWiki search and search for a specific word, the search index finds the page and you can open and read the page, although it should not actually be possible according to the permissions.
How can I prevent this or where do I have to set a permission so that the authorization cannot be bypassed via the search?
Thank you very much.