Wiki portlet permissions problem

[Boden Larson, geändert vor 15 Jahren.]

I can't seem to find a way to restrict community members from updating newly created Wiki pages in the Wiki portlet.

I removed all permissions except view for "community member" from the Wiki portlet config, and also configured the same permissions on the main wiki page.

However, when new Wiki pages are created, anyone in a community member role can update the new pages. This means that the guys running the wiki have to remember to manually set the permissions on every page they create. This slows things down.

I also tried the Wiki Display portlet with the same results.

Anyone?

[Boden Larson, geändert vor 15 Jahren.]

Update, I also assigned Wiki portlet permissions to the community member role, allowing only view, and this didn't help either.

[Ray Augé, geändert vor 15 Jahren.]

Assuming you are using the bundle, look inside the
[tt]ROOT/WEB-INF/lib/portal-impl.jar[/tt] and find the file
[tt]resource-actions/wiki.xml[/tt].

1) Copy this file into
[tt]ROOT/WEB-INF/classes/resource-actions/wiki.xml[/tt] (create folders
that are missing, but keep exact path).

2) Open this file with a text editor.

3) Locate the area referencing the WikiPage, which looks like this:

	<model-resource>
		<model-name>com.liferay.portlet.wiki.model.WikiPage</model-name>
		<portlet-ref>
			<portlet-name>36</portlet-name>
		</portlet-ref>
		<supports>
			<action-key>ADD_DISCUSSION</action-key>
			<action-key>DELETE</action-key>
			<action-key>PERMISSIONS</action-key>
			<action-key>SUBSCRIBE</action-key>
			<action-key>UPDATE</action-key>
			<action-key>VIEW</action-key>
		</supports>
		<community-defaults>
			<action-key>ADD_DISCUSSION</action-key>
			<action-key>SUBSCRIBE</action-key>
			<action-key>UPDATE</action-key>
			<action-key>VIEW</action-key>
		</community-defaults>
		<guest-defaults>
			<action-key>VIEW</action-key>
		</guest-defaults>
		<guest-unsupported>
			<action-key>ADD_DISCUSSION</action-key>
			<action-key>SUBSCRIBE</action-key>
			<action-key>UPDATE</action-key>
		</guest-unsupported>
	</model-resource>

4) Notice that by default [tt]community-defaults[/tt] contains
[tt]UPDATE[/tt]. In your copy of the file, remove the [tt]UPDATE[/tt]
reference from [tt]community-defaults[/tt].

5) Save

6) Restart the portal.

Note, this will only affect NEW Pages, BUT will also be a portal wide
behaviour change, yet it's a perfectly safe modification.

HTH!

[Boden Larson, geändert vor 15 Jahren.]

Thanks Ray, saved me again!

I wonder though if this should be the correct behavior. It seems like these permissions should be overridden with user-specified permisisons. Hidden permissions aren't a lot of fun.

[Ray Augé, geändert vor 15 Jahren.]

You're right of course.

But, fixing permissioning is an evolutionary task. It one of our biggest
missions, but it's gonna take time, but rest assured we're working on
it. We've already made some pretty big changes, and there's more to
come.

[Boden Larson, geändert vor 15 Jahren.]

Looking forward to it Ray. I have to say that the whole permissions system is what gives me the most trouble on a day to day basis using Liferay.

Communities, organizations, roles, groups, users, public & private areas, portlet-specific permissions, hidden defaults, property files. It's just too much to keep straight. One feature that might help in the meantime would be some sort of reporting tool by which the user could generate reports of portal-wide permissions based on user, group, role, etc. Digging this information up manually is difficult, and I've in some cases just completely recreated users just to be sure that they didn't have any lingering permissions that I forgot about.

[Kiran Kulkarni, geändert vor 10 Jahren.]

Hi,
I am facing a similar issue. Can you please guide me on this one.

I have created a site where I have set two roles. Role 1 has been set to user1 with all permissions for Wiki and "VIEW " permission for user2 in Role2. But when I login as user2, I am able to edit the Wiki page. How do I restrict the user2 from editing, adding and modifying the content on the wiki.

P.S: User1 and User2 are members of site.

[Senthil Chockalingam, geändert vor 13 Jahren.]

Dear Team,


we've gave view permission for the end user to access the WIKI, But that user can Edit the Wiki and he can revert the previous Version also(i.e for end user revert option also working). Please help us on.



Actually i want only give the View Access to End User. And for particualr user i want to give updated permission. it's is possible to keep the Revert option for Admin(Owner)?
this.

[Senthil Chockalingam, geändert vor 13 Jahren.]

If i use this Wiki.xml code in my portal, then my permission Page list option is empty(i.e. No check's box are there )

And How to remove the Revert option for End user?

Because we want to give this option to Wiki ADMIN only.

[Kiran Kulkarni, geändert vor 10 Jahren.]

Hi,
Has anyone found a solution for this. I am having a similar issue.
I have created a site where I have set two roles. Role 1 has been set to user1 with all permissions for Wiki and "VIEW " permission for user2 in Role2. But when I login as user2, I am able to edit the Wiki page. How do I restrict the user2 from editing, adding and modifying the content on the wiki.

P.S: User1 and User2 are members of site.