Modify ↓
Ticket #10359 (new defect)
Opened 8 months ago
Last modified 6 months ago
Wrong links highlighting with TracFineGrainedPermissions
| Reported by: | morgunl@… | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | wiki system | Version: | 0.12-stable |
| Severity: | normal | Keywords: | authzpolicy, wiki, links, highlighting |
| Cc: | |||
| Release Notes: | |||
| API Changes: | |||
Description
The links on WikiStart page are supposed to be disabled if the user has no WIKI_VIEW permission on corresponding pages. I'm using the list of policies:
permission_policies = AuthzSourcePolicy, AuthzPolicy, DefaultPermissionPolicy, LegacyAttachmentPolicy
Trac authz file:
[groups] admins = morgun [wiki:WikiStart@*] * = WIKI_VIEW [*] @admins = TRAC_ADMIN
So, testuser has no rights except WIKI_VIEW on WikiStart. But some links on WikiStart are highlighted as testuser can read them (see screen1.png). Following these links leads to error message "The user has no WIKI_VIEW rights".
Attachments
Change History
Changed 8 months ago by morgunl@…
- Attachment screen1.png added
comment:1 Changed 7 months ago by cboos
- Keywords authzpolicy, added; authz, removed
comment:2 Changed 6 months ago by morgunl@…
Note: See
TracTickets for help on using
tickets.



Sorry for bad bugreport. As far as I understood, it's not a bug. Look at the wiki code:
Only intertrac links (like [wiki:Mediator]) are being checked for permissions. Therefore, this is not the bug, but the feature. You can close it freely.