Disable anonymous access for closing bugs

[ludde]

Anonymous users should not be able to resolve bugs. Support for closing bugs has to have permissions.

[Christopher Lenz]

See also #1211.

[Christopher Lenz]

In many environments, it's okay to allow anonymous users to resolve tickets (for example, the typical "ah, my mistake" follow-up).

So there could be an additional TICKET_RESOLVE permission that would be granted to anonymous by default, but could easily be restricted to authenticated users.

[anonymous]

How about a system like in the php bugtracker, where the bug reporter can specify a password and with this password change the status. Then you can disallow anonymous users to resolve a bug.

(btw: anonymous users should not be allowed to accept a ticket, too)

[ludde]

Patch for fine grained ticket permissions

[anonymous]

Added a diff attachment with support for more fine-grained permissions.

These are the new permissions:

• TICKET_EDIT - Allow editing of ticket properties
• TICKET_RESOLVE - Allow closing tickets
• TICKET_APPEND - Only allow appending comments to the ticket
• TICKET_ATTACH - Allow attaching files

This patch also implements #1211

[anonymous]

Sorry, but why this patches not in trac trunk ?

[Christopher Lenz]

Merged in [1516].