id summary reporter owner description type status priority milestone component version severity resolution keywords cc branch changelog apichanges internalchanges 11651 Attachment example on TracFineGrainedPermissions page is incorrect Ryan J Ollos "There is an example on TracFineGrainedPermissions#UsageNotes which appears to be incorrect: {{{#!ini [wiki:WikiStart@*/attachment/*] [wiki:WikiStart@117/attachment/FOO.JPG] }}} It appears that a forward-slash is used rather than a colon: {{{#!ini [wiki:WikiStart@*/attachment:*] [wiki:WikiStart@117/attachment:FOO.JPG] }}} However, it also appears to be the case that the trailing `@*` is required for the case that the resource is specified: {{{#!ini [wiki:WikiStart@117/attachment:FOO.JPG@*] }}} The documentation states that it should be added implicitly, so this might be a defect. I tested with attachment `RepositoryBrowser.png` on `WikiStart`, and found the following in the logs when viewing the attachment: {{{ 04:18:14 PM Trac[authz_policy] DEBUG: Checking ATTACHMENT_VIEW on wiki:WikiStart@*/attachment:RepositoryBrowser.png@* }}} The following policy prevents viewing the attachment: {{{#!ini [wiki:WikiStart@*/attachment:RepositoryBrowser.png@*] * = !ATTACHMENT_VIEW }}} However, the policy doesn't work if the trailing `@*` is omitted." defect new normal next-stable-1.6.x attachment normal authzpolicy