Edgewall Software

Opened 10 years ago

Last modified 6 years ago

#10285 closed defect

Components in permission_policies should be always loaded — at Initial Version

Reported by: Mitar Owned by:
Priority: normal Milestone: 1.0.2
Component: general Version: 0.12.1
Severity: normal Keywords: permission, exception
Cc: mmitar@…, leho@…, dkg@…, ethan.jucovy@…, Steffen Hoffmann, Jun Omae Branch:
Release Notes:
API Changes:
Internal Changes:

Description

Trac should enforce loading of all components in permission_policies and restrain from starting if this is not possible. Otherwise it is possible that some component does not load (because of some system upgrade or any other Python error) and some security enforcing is turned off. This could have grave security implications.

More about this topic in this ticket.

Change History (0)

Note: See TracTickets for help on using tickets.