Visibility of attachments

Help / Discuss
1

Hi! Another behaviour I’m not able to explain :frowning: If I explicitly allow viewing for a user on Sandbox, XWikiGuest gets n entries on that location, been n the number of attachments on Sandbox. See below the results of the search:

image

And the attachments on Sandbox. XWikiLogo.png is a part of the installation. I added a new one to check if the number of results items are equal to the number of attachments. Confirmed.

image

Besides, any attempt to delete an attachment gives an error:

image

No error is recorded in catalina.out.

Any idea, please? Thanks!

2

This how the permission system of XWiki works:

  • If there’s no permission set on a page then it means view is allowed
  • As soon as you set one permission (like “view” for given user or group), the others don’t have “view” anymore.

See https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Access%20Rights/#HBasicrules

3

I think the answer to this question related with the one you give to me in a different thread: view rights control access to content and metadata, but not to document references. Somehow, guest users don’t having “view” any more because I set this permission to me, are still able to see that there are two attachments in Sandbox, although they are not able to see their properties.

In any case, that doesn’t explain why I’m not able to delete the attachment I uploaded. I was trying to delete it by using the account, the only one on that XWiki now, I used to upload it.

Thanks!

4

It doesn’t seem a problem of permissions since otherwise you wouldn’t be able to see the delete button. Without more info about the cause, it’s difficult to guess. Maybe you could tell us how to reproduce it on a clean XS install so that we can try it?

thx

5

I’m unable to reproduce it in a clean 15.9 instance running on AlmaLinux 9.3. It is accessible online:

I stopped the upgrade of this box “the traditional way” as I was happy with the process on Ubuntu. I will be back to updating this box to the current version ASAP and report back! So far, the issue could seem related with my weird actions on the Ubuntu box, but I am a bit worried about the relevance of having a clean install to debug issues.