Edgewall Software
Modify

Opened 14 years ago

Closed 14 years ago

Last modified 10 years ago

#10139 closed defect (worksforme)

Can't see attachments. Error: ATTACHMENT_VIEW privileges are required to perform this operation on Attachment

Reported by: sb@… Owned by:
Priority: normal Milestone:
Component: attachment Version: 0.11.7
Severity: normal Keywords:
Cc: Branch:
Release Notes:
API Changes:
Internal Changes:

Description

I have removed all permissions for anonymous and I get the following error "ATTACHMENT_VIEW privileges are required to perform this operation on Attachment", when I click on a attachment to view it. I can create attachment without any problem. The permissions I have is TRAC_ADMIN. When insert 'anonymous' with value 'ATTACHMENT_VIEW' into the database table permission then I don't get an error. I have to do it throught the database because I can't select ATTACHMENT_VIEW permission on the admin page.

Attachments (0)

Change History (5)

comment:1 by osimons, 14 years ago

Resolution: worksforme
Status: newclosed

Since 0.11 there has been no separate permissions for attachments - that is why you can't find them in Admin. Attachment permissions now (default) follow the parent resource like ticket or wiki page, and is implemented via setting [trac] permission_policies = ... that should include an entry for LegacyAttachmentPolicy. If you can modify a page, you can attach a file. If you can destructively delete a page like an admin, you can also delete an attachment.

You should remove the extra hacked permissions from your db as they may interfere with the default policy.

comment:2 by sb@…, 14 years ago

I have LegacyAttachmentPolicy in my trac.ini permission_policies line, and if I don't hack permissions table I can't view any of my attachments.

comment:3 by janusz@…, 11 years ago

I get the error message ATTACHMENT_VIEW privileges are required to perform this operation on Attachment .... I'm on brand new install (version 1.0.1 on Ubuntu 12.04).

I have a TRAC_ADMIN permission. I even added record into permission table for my account with ATTACHMENT_VIEW, restarted everything and logout/login and still getting the error. My permission policy looks like this:

permission_policies = DefaultPermissionPolicy, LegacyAttachmentPolicy

Any workarounds?

comment:4 by Ryan J Ollos, 11 years ago

It's likely an InstallationIssue or PluginIssue. Please ask on the MailingList and we'll try to help you work out the problem.

comment:5 by michael.lipaczewski@…, 10 years ago

Just for the records: same problem here. In my case I try to add attachments using the xml-rpc extension. It also notifies my that I need this privileges.

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The ticket will remain with no owner.
The resolution will be deleted. Next status will be 'reopened'.
to The owner will be changed from (none) to the specified user.

Add Comment


E-mail address and name can be saved in the Preferences .
 
Note: See TracTickets for help on using tickets.