|Title|EditPermission walks from LeftMenu to Main
|Date|04-Mar-2005 23:08:16 EET
|[Bug criticality]|~BadBug
|Browser version|Firefox 1.0
|[Bug status]|ClosedBug
|[PageProvider] used|VersioningFileProvider
|Servlet Container|Tomcat 5.5.7
|Operating System|Windows XP
|Java version|1.5.0

Let LeftMenu and Main have no ACLs set.
Then edit LeftMenu and add
[[{DENY edit Guest}]
After that, Guest cannot edit LeftMenu, which is good.
Then return to Main, and observe, that Main cannot be edited by Guest, too!
This is not what is expected.
Debugging shows, that because LeftMenu is included in ViewTemplate.jsp,
the NEG EditPermission is not only added to the LeftMenu WikiPage, but also
to the Main WikiPage.
I think Main should be editable, even if LeftMenu is not editable.
(If I remove the ACL from LeftMenu as administrator, I can again edit
LeftMenu as guest, but the ACL stays in Main, so guest still cannot edit it.
But anyhow, the acl should not be added to Main, then the second problem does
not occur.)


The authentication system is deprecated and will be replaced with something sane in a later version.  Please use at your own risk - no bugs will be fixed.  Please see [AuthorizationAndAuthenticationDevelopment] for more information.

-- JanneJalkanen