#10139 closed defect (worksforme)
Can't see attachments. Error: ATTACHMENT_VIEW privileges are required to perform this operation on Attachment
| Reported by: | Owned by: | ||
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | attachment | Version: | 0.11.7 |
| Severity: | normal | Keywords: | |
| Cc: | Branch: | ||
| Release Notes: | |||
| API Changes: | |||
| Internal Changes: | |||
Description
I have removed all permissions for anonymous and I get the following error "ATTACHMENT_VIEW privileges are required to perform this operation on Attachment", when I click on a attachment to view it. I can create attachment without any problem. The permissions I have is TRAC_ADMIN. When insert 'anonymous' with value 'ATTACHMENT_VIEW' into the database table permission then I don't get an error. I have to do it throught the database because I can't select ATTACHMENT_VIEW permission on the admin page.
Attachments (0)
Change History (5)
comment:1 by , 15 years ago
| Resolution: | → worksforme |
|---|---|
| Status: | new → closed |
comment:2 by , 15 years ago
I have LegacyAttachmentPolicy in my trac.ini permission_policies line, and if I don't hack permissions table I can't view any of my attachments.
comment:3 by , 12 years ago
I get the error message ATTACHMENT_VIEW privileges are required to perform this operation on Attachment .... I'm on brand new install (version 1.0.1 on Ubuntu 12.04).
I have a TRAC_ADMIN permission. I even added record into permission table for my account with ATTACHMENT_VIEW, restarted everything and logout/login and still getting the error. My permission policy looks like this:
permission_policies = DefaultPermissionPolicy, LegacyAttachmentPolicy
Any workarounds?
comment:4 by , 12 years ago
It's likely an InstallationIssue or PluginIssue. Please ask on the MailingList and we'll try to help you work out the problem.
comment:5 by , 11 years ago
Just for the records: same problem here. In my case I try to add attachments using the xml-rpc extension. It also notifies my that I need this privileges.



Since 0.11 there has been no separate permissions for attachments - that is why you can't find them in Admin. Attachment permissions now (default) follow the parent resource like ticket or wiki page, and is implemented via setting
[trac] permission_policies = ...that should include an entry forLegacyAttachmentPolicy. If you can modify a page, you can attach a file. If you can destructively delete a page like an admin, you can also delete an attachment.You should remove the extra hacked permissions from your db as they may interfere with the default policy.