Right Types
Reference
XWiki ships eleven rights, named below by the column heading under which the administration displays them. Each one has a default value that applies when no rule determines it, a conflict rule that settles disagreeing rules at the same level, rights that it also grants, and the levels it can be set on.
| Right | What it allows | Default | If rules conflict | Also grants | Can be set on |
|---|---|---|---|---|---|
| View | Viewing a page, and loading it through the API. | Allowed | Deny wins | Wiki, space, page | |
| Comment | Adding a comment to a page, without editing or deleting it. | Allowed | Deny wins | Wiki, space, page | |
| Edit | Editing a page with its objects and attachments, and creating pages in a space. | Allowed | Deny wins | View | Wiki, space, page |
| Script | Executing the scripts that a page contains. | Denied | Deny wins | Wiki, space, page | |
| Delete | Moving a page to the recycle bin. | Denied | Deny wins | View | Wiki, space, page |
| Admin | Administering a wiki or a space, including deleting pages permanently from the recycle bin. | Denied | Allow wins | Login, View, Script, Edit, Delete, Register, Comment | Wiki, space |
| Register | Creating an account on the wiki. | Allowed | Allow wins | Wiki | |
| Program | Executing arbitrary Java code, so that any page saved by such a user can run any script. | Denied | Allow wins | Login, View, Script, Edit, Delete, Register, Comment, Admin, Create Wiki | Main wiki |
| Create Wiki | Creating a subwiki. | Denied | Deny wins | Main wiki | |
| Login | Logging in to the wiki. | Allowed | Allow wins | Wiki | |
| Creator | Deleting a page you created. XWiki grants it to the creator of a page. | Denied | Allow wins | Delete | Page |
"Deny wins" means that a single explicit denial is enough to refuse the right. "Allow wins" means that a single allow overrules a denial set beside it.
Where each right is offered in the administration
The administration does not offer every right everywhere: the columns of the rights grid depend on the section displaying it.
| Administration section | Columns it displays |
|---|---|
| "Rights", in the administration of the main wiki | View, Comment, Edit, Script, Delete, Admin, Register, Program |
| "Rights", in the administration of a subwiki | View, Comment, Edit, Script, Delete, Admin, Register |
| "Rights: Page & Children", in the administration of a page | View, Comment, Edit, Script, Delete, Admin |
| "Rights: Page", in the administration of a page | View, Comment, Edit, Script, Delete |
| "Creation Right", in the "Wikis" category of the administration | Create Wiki |
"Login" and "Creator" get no column: "Login" follows from being a registered user, and "Creator" is granted by XWiki itself to whoever created the page. Rights registered by installed extensions get no column here either, and are set in their own sections, described in Change the Extension Rights Globally.
FAQ
Why is there no "Program" column on my subwiki?
"Program" and "Create Wiki" affect the whole farm, so they can only be granted from the main wiki.
Who needs "Script" right for the scripts of a page to run?
The last author of the content, not the reader: a script executes only if the user who last saved that content has "Script" right.
Can a user delete only the pages they created?
Yes, and it is the default: "Delete" is denied to everyone, while the "Creator" right that XWiki grants on a page lets its author delete it.
