Edgewall Software
Modify

Ticket #10359 (new defect)

Opened 8 months ago

Last modified 6 months ago

Wrong links highlighting with TracFineGrainedPermissions

Reported by: morgunl@… Owned by:
Priority: normal Milestone:
Component: wiki system Version: 0.12-stable
Severity: normal Keywords: authzpolicy, wiki, links, highlighting
Cc:
Release Notes:
API Changes:

Description

The links on WikiStart page are supposed to be disabled if the user has no WIKI_VIEW permission on corresponding pages. I'm using the list of policies:

permission_policies = AuthzSourcePolicy, AuthzPolicy, DefaultPermissionPolicy, LegacyAttachmentPolicy

Trac authz file:

[groups]
admins = morgun

[wiki:WikiStart@*]
* = WIKI_VIEW

[*]
@admins = TRAC_ADMIN

So, testuser has no rights except WIKI_VIEW on WikiStart. But some links on WikiStart are highlighted as testuser can read them (see screen1.png). Following these links leads to error message "The user has no WIKI_VIEW rights".

Attachments

screen1.png (48.8 KB) - added by morgunl@… 8 months ago.

Download all attachments as: .zip

Change History

Changed 8 months ago by morgunl@…

comment:1 Changed 7 months ago by cboos

  • Keywords authzpolicy, added; authz, removed

comment:2 Changed 6 months ago by morgunl@…

Sorry for bad bugreport. As far as I understood, it's not a bug. Look at the wiki code:

* '''[/wiki/ADCReader ADCReader]'''
* '''[/wiki/ProjectMarker/Overview MarkerP]'''
  * Программное обеспечение [wiki:MarkerP]
  * Библиотека [wiki:DevApiEmul]
  * Библиотека [wiki:Devapi]
* '''MoirSelector'''
* [wiki:Mediator]

Only intertrac links (like [wiki:Mediator]) are being checked for permissions. Therefore, this is not the bug, but the feature. You can close it freely.

View

Add a comment

Modify Ticket

Change Properties
<Author field>
Action
as new
as The resolution will be set. Next status will be 'closed'
to The owner will be changed from (none). Next status will be 'new'
The owner will be changed from (none) to anonymous. Next status will be 'assigned'
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.