[jira] [Commented] (JSPWIKI-502) Show Wikipages in Search without Authorization

["David Vittor (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/JSPWIKI-502?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14298525#comment-14298525 ] 

David Vittor commented on JSPWIKI-502:
--------------------------------------

I've commited this patch in so every search that has access to a WikiContext will apply permissions. However for the QuickSearch, I've managed to pass the request object in, but cannot from this pull in the required WikiContext, cause I'm not on a JSP page (which has pageContext), on within the context of the JSPWiki Servlets. The custom WikiAjaxDispatchServlet may need to be passed the pageContext or the WikiContext itself to make this work. 

> Show Wikipages in Search without Authorization
> ----------------------------------------------
>
>                 Key: JSPWIKI-502
>                 URL: https://issues.apache.org/jira/browse/JSPWIKI-502
>             Project: JSPWiki
>          Issue Type: Improvement
>          Components: Search
>    Affects Versions: 2.8.1
>            Reporter: Kurt Stein
>            Assignee: David Vittor
>            Priority: Minor
>             Fix For: 3.1
>
>         Attachments: screenshot-1.jpg, searchWithPermissions.patch
>
>
> I often have the problem that users tell me: "I can´t find the information in the wiki." 
> But I know that it is actually there. So they don´t have the authorization to view the page and therefore the search filters the page away. 
> So here is my question: Why don´t we show the user that there is a page that contains the information he is searching for and he simply does not have the authorization to see it. (see screenshot)
> Then he can ask for the permission instead of making stupid stuff like creating a new page for his issue.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)