id,summary,reporter,owner,description,type,status,priority,milestone,component,version,severity,resolution,keywords,cc,branch,changelog,apichanges,internalchanges 11651,Attachment example on TracFineGrainedPermissions page is incorrect,Ryan J Ollos,,"There is an example on TracFineGrainedPermissions#UsageNotes which appears to be incorrect: {{{#!ini [wiki:WikiStart@*/attachment/*] [wiki:WikiStart@117/attachment/FOO.JPG] }}} It appears that a forward-slash is used rather than a colon: {{{#!ini [wiki:WikiStart@*/attachment:*] [wiki:WikiStart@117/attachment:FOO.JPG] }}} However, it also appears to be the case that the trailing `@*` is required for the case that the resource is specified: {{{#!ini [wiki:WikiStart@117/attachment:FOO.JPG@*] }}} The documentation states that it should be added implicitly, so this might be a defect. I tested with attachment `RepositoryBrowser.png` on `WikiStart`, and found the following in the logs when viewing the attachment: {{{ 04:18:14 PM Trac[authz_policy] DEBUG: Checking ATTACHMENT_VIEW on wiki:WikiStart@*/attachment:RepositoryBrowser.png@* }}} The following policy prevents viewing the attachment: {{{#!ini [wiki:WikiStart@*/attachment:RepositoryBrowser.png@*] * = !ATTACHMENT_VIEW }}} However, the policy doesn't work if the trailing `@*` is omitted.",defect,new,normal,next-stable-1.6.x,attachment,,normal,,,authzpolicy,,,,