#10139 closed defect (worksforme)
Can't see attachments. Error: ATTACHMENT_VIEW privileges are required to perform this operation on Attachment
Reported by: | Owned by: | ||
---|---|---|---|
Priority: | normal | Milestone: | |
Component: | attachment | Version: | 0.11.7 |
Severity: | normal | Keywords: | |
Cc: | Branch: | ||
Release Notes: | |||
API Changes: | |||
Internal Changes: |
Description
I have removed all permissions for anonymous and I get the following error "ATTACHMENT_VIEW privileges are required to perform this operation on Attachment", when I click on a attachment to view it. I can create attachment without any problem. The permissions I have is TRAC_ADMIN. When insert 'anonymous' with value 'ATTACHMENT_VIEW' into the database table permission then I don't get an error. I have to do it throught the database because I can't select ATTACHMENT_VIEW permission on the admin page.
Attachments (0)
Change History (5)
comment:1 by , 14 years ago
Resolution: | → worksforme |
---|---|
Status: | new → closed |
comment:2 by , 14 years ago
I have LegacyAttachmentPolicy in my trac.ini permission_policies line, and if I don't hack permissions table I can't view any of my attachments.
comment:3 by , 11 years ago
I get the error message ATTACHMENT_VIEW privileges are required to perform this operation on Attachment ...
. I'm on brand new install (version 1.0.1 on Ubuntu 12.04).
I have a TRAC_ADMIN permission. I even added record into permission table for my account with ATTACHMENT_VIEW, restarted everything and logout/login and still getting the error. My permission policy looks like this:
permission_policies = DefaultPermissionPolicy, LegacyAttachmentPolicy
Any workarounds?
comment:4 by , 11 years ago
It's likely an InstallationIssue or PluginIssue. Please ask on the MailingList and we'll try to help you work out the problem.
comment:5 by , 10 years ago
Just for the records: same problem here. In my case I try to add attachments using the xml-rpc extension. It also notifies my that I need this privileges.
Since 0.11 there has been no separate permissions for attachments - that is why you can't find them in Admin. Attachment permissions now (default) follow the parent resource like ticket or wiki page, and is implemented via setting
[trac] permission_policies = ...
that should include an entry forLegacyAttachmentPolicy
. If you can modify a page, you can attach a file. If you can destructively delete a page like an admin, you can also delete an attachment.You should remove the extra hacked permissions from your db as they may interfere with the default policy.