Changes between Version 2 and Version 5 of ReadonlyWikiPolicy
- Timestamp:
- (multiple changes)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
ReadonlyWikiPolicy
v2 v5 5 5 Earlier versions of Trac had a defect in which the read-only attribute would not be checked when adding attachments to wiki pages, allowing users with `WIKI_MODIFY` to add attachments to read-only wiki pages rather than enforcing the requirement of `WIKI_ADMIN`. In #11244, the `ReadonlyWikiPolicy` was added, which unequivocally requires `WIKI_ADMIN` for modifying, deleting or renaming of read-only pages (and adding an attachment requires permission to modify the page). Enforcing the read-only attribute through a permission policy additionally allows a custom permission policy to be written for enforcing the read-only attribute. 6 6 7 For new Trac installations in 1.1.2 and later, `ReadonlyWikiPolicy` is enabled by default. When upgrading from earlier versions, `ReadonlyWikiPolicy` need to be added to `permission_policies`. If the default list of permission policies is in effect, then `ReadonlyWikiPolicy` only needs to be added to the front of the list.7 For new Trac installations in 1.1.2 and later, `ReadonlyWikiPolicy` is enabled by default. When upgrading from earlier versions, `ReadonlyWikiPolicy` will be added to the list of permissions policies when upgrading the environment if `permissions_policies` has the default value `DefaultPermissionPolicy, LegacyAttachmentPolicy`. If `permissions_policies` has some other value, then the TracIni configuration file needs to be edited to add `ReadonlyWikiPolicy` to the list of `permission_policies`. A message will be echoed to the console when upgrading the environment, indicating if any action needs to be taken. `ReadonlyWikiPolicy` should be placed before `DefaultPermissionPolicy, LegacyAttachmentPolicy`. 8 8 {{{#!ini 9 9 [trac] … … 13 13 }}} 14 14 15 When otherpermission policies are active, care will need to be taken to ensure the proper ordering. See TracFineGrainedPermissions#ReadonlyWikiPolicy for more details.15 When additional permission policies are active, care will need to be taken to ensure the proper ordering. See TracFineGrainedPermissions#ReadonlyWikiPolicy for more details.