New Foswiki release 2.1.6 is available with important security fixes.
Sourceforge foswiki email lists being discontinued. Subscribe to the new Foswiki announce and discuss lists at MailingLists
You are here: Foswiki>Tasks Web>Item13951 (02 Dec 2016, MichaelDaum)Edit Attach

Item13951: NatEditPlugin should hide the permission setting option Nobody to admins

Priority: Enhancement
Current State: Confirmed
Released In: n/a
Target Release: patch
Applies To: Extension
Component: NatEditPlugin
Reported By: KennethLavrsen
Waiting For:
Last Change By: MichaelDaum
In the Permissions tab there is an option "Nobody" which in reality sets the access rights to the current topic to AdminGroup.

That is a nice feature for an admin. But it is a trap for young players for all other users. If you pick that and save you cannot even see your own topic.

I cannot see why a none admin would save a topic so only admins can see it.

My proposal is to make this entry conditional to the current user being an admin. If he is - he sees the option. If not it is hidden.

You can still manually define an ALLOWTOPICVIEW to someone else than yourself today, but at least it takes an effort to do this today. With NatEdit preferences have become easy (and that is a good thing). It is just too easy in this case.

-- KennethLavrsen - 10 Feb 2016

Confirming this. It's happened to users a couple of times as well.

-- GeorgeClark - 02 Dec 2016

Patches welcome as usual smile

-- MichaelDaum - 02 Dec 2016

ItemTemplate edit

Summary NatEditPlugin should hide the permission setting option Nobody to admins
ReportedBy KennethLavrsen
Codebase 2.1.0
SVN Range
AppliesTo Extension
Component NatEditPlugin
Priority Enhancement
CurrentState Confirmed
TargetRelease patch
ReleasedIn n/a
Topic revision: r3 - 02 Dec 2016, MichaelDaum - This page was cached on 22 Mar 2018 - 13:20.

The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License