I am not sure of why the search requires programming rights but I'm putting a wild guess on the fact that if you would use normal rights check, you might need to check if the user that performs the search has view rights on each page that might result in the search, which of course it's almost impossible.
However, what I want you to understand is that using the programming rights from a page saved by an admin is not a "workaround", but an intended feature of xwiki. Many applications use this. If you still want to use the search from wherever you want, you might need to write your own plugin. However, i suggest you have a good look at the lucene plugin first. Cristian > > Hi Cristian, > This information does help me understand things better. Probably I can use > this feature as a workaround to always execute search. However I would > still > like to know the rationale of why search is restricted to programming > rights > only. I think if any user has view rights then he should be able to use > the > search apis. > > What do others say? > > Thanks > Sachin > > > > cristian.vrabie wrote: >> >> Hi Sachin, >> The programming rights work a bit different. The check is not if the >> current logged user has programming rights, but if the person that saved >> the page(document) last time has them. For example, if the page that >> executes the search is created/saved by an admin that has programming >> rights, inside it you can execute scripts that require programming >> rights >> even though the current user doesn't have them. >> >> Hope this helps, >> Cristian >> >> > > > ----- > http://www.assembla.com/wiki/show/sachin_mittal about me: > -- > View this message in context: > http://www.nabble.com/Using-search-apis-tp17315167p17323452.html > Sent from the XWiki- Dev mailing list archive at Nabble.com. > > _______________________________________________ > devs mailing list > [email protected] > http://lists.xwiki.org/mailman/listinfo/devs > _______________________________________________ devs mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/devs
