The rights are not properly applied for Simple Users

CamiAndrei commented 4 years ago

Environment: Forum v2.7, and XWiki versions: 8.4.5 (2.6.2), 11.3.5 and 11.9 Steps to reproduce:

Create a forum with an Admin User ( a Simple user can't create a forum . See: #85 )
Add a topic, answer with a Simple User
Add a restriction in rights, for example in the Forum page > Administer page> Page&Children > Allow edit right only for Admin users
Go back to the a topic page Answer page of the simple user ( with the Simple User) Results:
The simple user can edit his answers/comments and add comments
He can't see "Add topic" and "Add answer" buttons
He can also see the delete buttons for the answers and comments added before restrictions, but can't delete his answers/comments, even if there are no reply to his content. Message The content could not be deleted. Forbidden
When you try edit an answer added before the restriction by the same user the edit button is visible but when you click save, this message is displayedYou are not allowed to view this page or perform this action. Either the delete button should be hidden or let the user delete his answers if there are no replies for them.

CamiAndrei commented 4 years ago

Seems similar to #61

ndascalita commented 10 months ago

Could reproduce on XWiki 14.10.20 with Forum Application PRO 2.9.1

xwikisas / application-forum