Changes for page XWiki Authentication and Access Control

Last modified by Agnease on 2026/05/25 12:52

Manage
- Copy
Actions
- Export
- Print Preview
Viewers
- Source
- Siblings
- Content
- Comments
- Attachments
- History
- Information
- Likes

From 8.6 to 8.5 From 8.9 to 8.8

From version 8.8

edited by Agnease
on 2026/05/25 12:50

Change comment: There is no comment for this version

To version 8.6

edited by Agnease
on 2026/05/25 12:47

Change comment: There is no comment for this version

Raw
Rendered

Summary

Page properties (1 modified, 0 added, 0 removed)

Details

Page properties

Content

@@ -134,24 +134,7 @@
      </div>
    </section>
--  ## ACCESS CONTROL PROCESS
--  #set ($accessProcessItems = [{
--    'title': 'Review the current access setup',
--    'content': 'Authentication method, user directory, groups, synchronization behavior, rights configuration and known issues.'
--  },{
--    'title': 'Clarify the target model',
--    'content': 'Expected login flow, user provisioning, group mapping, administration model and permission boundaries.'
--  },{
--    'title': 'Validate configuration safely',
--    'content': 'Test authentication, synchronization and rights behavior before applying changes to production when needed.'
--  },{
--    'title': 'Apply controlled changes',
--    'content': 'Update configuration, extensions, rights or group mappings with attention to rollback and administrator access.'
--  },{
--    'title': 'Document the result',
--    'content': 'Provide practical notes about the final configuration, assumptions, risks and future maintenance actions.'
--  }])
--
++  ## APPROACH
    <section id="access-control-process" class="split-section" aria-labelledby="process-title">
      <div class="container">
        <div class="split-grid">
@@ -171,12 +171,26 @@
          </div>
          <ol class="process-list">
--          #foreach ($entry in $accessProcessItems)
--            <li>
--              <strong>$entry.title</strong>
--              $entry.content
--            </li>
--          #end
++          <li>
++            <strong>Review the current access setup</strong>
++            Authentication method, user directory, groups, synchronization behavior, rights configuration and known issues.
++          </li>
++          <li>
++            <strong>Clarify the target model</strong>
++            Expected login flow, user provisioning, group mapping, administration model and permission boundaries.
++          </li>
++          <li>
++            <strong>Validate configuration safely</strong>
++            Test authentication, synchronization and rights behavior before applying changes to production when needed.
++          </li>
++          <li>
++            <strong>Apply controlled changes</strong>
++            Update configuration, extensions, rights or group mappings with attention to rollback and administrator access.
++          </li>
++          <li>
++            <strong>Document the result</strong>
++            Provide practical notes about the final configuration, assumptions, risks and future maintenance actions.
++          </li>
          </ol>
        </div>
      </div>
@@ -183,24 +183,6 @@
    </section>
    ## SPECIFIC AREAS
--  #set ($accessAreasItems = [{
--    'title': 'Directory configuration',
--    'icon': 'server',
--    'content': 'LDAP/AD connection settings, bind users, search bases, user filters, group filters and synchronization behavior.'
--  },{
--    'title': 'Group mapping',
--    'icon': 'random',
--    'content': 'Mapping external groups into XWiki groups while avoiding unnecessary complexity and performance issues.'
--  },{
--    'title': 'Permission structure',
--    'icon': 'lock',
--    'content': 'Space and page rights, inheritance, administrative access, edit rights, view rights and application permissions.'
--  },{
--    'title': 'Security-sensitive rights',
--    'icon': 'user-secret',
--    'content': 'Review of powerful rights such as admin, programming, script and edit rights where they affect security.'
--  }])
--
    <section aria-labelledby="areas-title">
      <div class="container">
        <h2 id="areas-title">Specific areas we can review</h2>
@@ -211,16 +211,45 @@
        </p>
        <div class="widgets">
--        #foreach ($entry in $accessAreasItems)
--          <article class="widget">
--            <div class="icon" aria-hidden="true">
--              <i class="fa fa-$entry.icon"></i>
--              <h4>$entry.title</h4>
--            </div>
++        <article class="widget">
++          <div class="icon" aria-hidden="true">
++            <i class="fa fa-server"></i>
++            <h4>Directory<br />configuration</h4>
++          </div>
++          <p>
++            LDAP/AD connection settings, bind users, search bases, user filters, group filters and synchronization behavior.
++          </p>
++        </article>
--            <p>$entry.content</p>
--          </article>
--        #end
++        <article class="widget">
++          <div class="icon" aria-hidden="true">
++            <i class="fa fa-random"></i>
++            <h4>Group<br />mapping</h4>
++          </div>
++          <p>
++            Mapping external groups into XWiki groups while avoiding unnecessary complexity and performance issues.
++          </p>
++        </article>
++
++        <article class="widget">
++          <div class="icon" aria-hidden="true">
++            <i class="fa fa-lock"></i>
++            <h4>Permission<br />structure</h4>
++          </div>
++          <p>
++            Space and page rights, inheritance, administrative access, edit rights, view rights and application permissions.
++          </p>
++        </article>
++
++        <article class="widget">
++          <div class="icon" aria-hidden="true">
++            <i class="fa fa-user-secret"></i>
++            <h4>Security<br />sensitive rights</h4>
++          </div>
++          <p>
++            Review of powerful rights such as admin, programming, script and edit rights where they affect security.
++          </p>
++        </article>
        </div>
      </div>
    </section>