Changes for page What an XWiki Security Review Should Actually Include

Last modified by Agnease on 2026/06/08 18:44

From version 2.1

edited by Agnease
on 2026/05/26 11:01

Change comment: There is no comment for this version

To version 3.2

edited by Agnease
on 2026/06/02 11:02

Change comment: There is no comment for this version

Summary

Page properties

Content

@@ -122,6 +122,10 @@
              of small exceptions that nobody reviewed later.
            </p>
++          <p>
++            For a deeper look at this topic, see <a href="$xwiki.getURL('resources.xwiki-access-rights-governance')">why XWiki access rights need a clear governance model</a>.
++          </p>
++
            <h3>3. Authentication and identity management</h3>
            <p>
              Authentication should be reviewed beyond the simple question of whether users can log in. LDAP, Active

xwiki-security-review.png

Author

...	...	@@ -1,0 +1,1 @@
	1	+XWiki.Admin

Size

...	...	@@ -1,0 +1,1 @@
	1	+1.3 MB

Content