Edgewall Software
Modify

Opened 13 years ago

Closed 9 years ago

#10359 closed defect (worksforme)

Wrong links highlighting with TracFineGrainedPermissions

Reported by: morgunl@… Owned by:
Priority: normal Milestone:
Component: wiki system Version: 0.12-stable
Severity: normal Keywords: authzpolicy
Cc: Branch:
Release Notes:
API Changes:
Internal Changes:

Description

The links on WikiStart page are supposed to be disabled if the user has no WIKI_VIEW permission on corresponding pages. I'm using the list of policies:

permission_policies = AuthzSourcePolicy, AuthzPolicy, DefaultPermissionPolicy, LegacyAttachmentPolicy

Trac authz file:

[groups]
admins = morgun

[wiki:WikiStart@*]
* = WIKI_VIEW

[*]
@admins = TRAC_ADMIN

So, testuser has no rights except WIKI_VIEW on WikiStart. But some links on WikiStart are highlighted as testuser can read them (see screen1.png). Following these links leads to error message "The user has no WIKI_VIEW rights".

Attachments (1)

screen1.png (48.8 KB ) - added by morgunl@… 13 years ago.

Download all attachments as: .zip

Change History (5)

by morgunl@…, 13 years ago

Attachment: screen1.png added

comment:1 by Christian Boos, 12 years ago

Keywords: authzpolicy added; authz removed

comment:2 by morgunl@…, 12 years ago

Sorry for bad bugreport. As far as I understood, it's not a bug. Look at the wiki code:

* '''[/wiki/ADCReader ADCReader]'''
* '''[/wiki/ProjectMarker/Overview MarkerP]'''
  * Программное обеспечение [wiki:MarkerP]
  * Библиотека [wiki:DevApiEmul]
  * Библиотека [wiki:Devapi]
* '''MoirSelector'''
* [wiki:Mediator]

Only intertrac links (like [wiki:Mediator]) are being checked for permissions. Therefore, this is not the bug, but the feature. You can close it freely.

comment:3 by Christian Boos, 11 years ago

Milestone: undecided

All the tickets for {20} from last year have probably been seen multiple times by now, yet are still to be triaged…

in reply to:  2 comment:4 by Jun Omae, 9 years ago

Keywords: wiki links highlighting removed
Milestone: undecided
Resolution: worksforme
Status: newclosed

Replying to morgunl@…:

Only intertrac links (like [wiki:Mediator]) are being checked for permissions. Therefore, this is not the bug, but the feature. You can close it freely.

Closing as worksforme.

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The ticket will remain with no owner.
The resolution will be deleted. Next status will be 'reopened'.
to The owner will be changed from (none) to the specified user.

Add Comment


E-mail address and name can be saved in the Preferences .
 
Note: See TracTickets for help on using tickets.