Can only edit Wiki pages with anonymous user, even with WIKI_ADMIN or TRAC_ADMIN

[cardillr@…]

I don't know whether this is a new bug, or the result of the upgrade from 0.9.3 to 0.9.4 but it's really annoying.

If I configure the "anonymous" user with "WIKI_ADMIN" then I can edit and preview Wiki pages as expected (i.e., WikiStart or Sandbox). However, if I configure my user "domain\user" with "TRAC_ADMIN" or "WIKI_ADMIN" it just displays a blank page with the "Create this page" button as if it doesn't exist. However, the page does still exist, and the changes have not been made.

NOTE1: The "domain" part of the user name is because I have Apache doing SSPI integrated authentication and that's what the user names look like after login. No problems with any of that, other permissions work just as expected.

NOTE2: I have verified that my user is configured with "TRAC_ADMIN" by insuring that I can see the About/Config links, even though I don't have "CONFIG_VIEW", etc. And all other features that come with "TRAC_ADMIN" seem to be working fine because my default configuration is somewhat restrictive.

What I've tried so far:

• trac-admin project wiki upgrade

(no effect)

• removing all other permissions and just setting "WIKI_MODIFY"

(no effect)

• tried to use the "Delete this page" button

(just shows "Create this page" button, but page is not deleted)

The permissions have been set more restrictive than default install:

   anonymous         MILESTONE_VIEW
   anonymous         REPORT_SQL_VIEW
   anonymous         REPORT_VIEW
   anonymous         ROADMAP_VIEW
   anonymous         SEARCH_VIEW
   anonymous         TICKET_VIEW
   anonymous         WIKI_VIEW
   domain\user       TRAC_ADMIN

[anonymous]

Trying to provide permission list again:

anonymous MILESTONE_VIEW anonymous REPORT_SQL_VIEW anonymous REPORT_VIEW anonymous ROADMAP_VIEW anonymous SEARCH_VIEW anonymous TICKET_VIEW anonymous WIKI_VIEW domain\user TRAC_ADMIN

[ojacobson@…]

anonymous MILESTONE_VIEW
anonymous REPORT_SQL_VIEW
anonymous REPORT_VIEW
anonymous ROADMAP_VIEW
anonymous SEARCH_VIEW
anonymous TICKET_VIEW
anonymous WIKI_VIEW
domain\user TRAC_ADMIN

Fixed your permissions list formatting.

[matthew.donald@…]

Is this an escape character problem? Try specifying (note '
')

domain\\user TRAC_ADMIN

[anonymous]

I tried it, just to be complete, but it did not work. As I said, other permissions are working fine for these accounts, so I don't think it's a problem with processing permissions.

What I did:

remove domain\user TRAC_ADMIN add domain
user TRAC_ADMIN

What happened:

I could only access same settings as anonymous until I changed back to domain\user.

[anonymous]

Update: Apparently this is just another manifestation of an SSPI problem with IE, which is a documented MS bug that others discovered work-arounds to (​see this discussion). I don't know if there is anything that can be done with TRAC to work-around this problem, but here are the Apache configuration changes that fixed this problem for me…

(disable keep alives for IE):

BrowserMatch "MSIE 6\.0; Windows NT 5\." nokeepalive

(force logon dialog for TRAC login location):

SSPIBasicPreferred  On

[sam@…]

This is not an SSPI related problem. I got the same here, with "normal" Apache users. What's strange is that I can't reproduce the bug on ​https://ssl.bulix.org/projects/zwe but it's always reproducible on ​https://ssl.bulix.org/projects/lcd4linux

Both of these trac envs uses the same Trac installation (trunk)

[Matthew Good]

Replying to sam@bulix.org:

This is not an SSPI related problem. I got the same here, with "normal" Apache users. What's strange is that I can't reproduce the bug on ​https://ssl.bulix.org/projects/zwe but it's always reproducible on ​https://ssl.bulix.org/projects/lcd4linux

Both of these trac envs uses the same Trac installation (trunk)

Are you still having problems with this? If you're not using SSPI you may have a separate issue from the original user. If you've been able to resolve this please follow up so we can close this ticket.

[Matthew Good]

#1091 has been marked as a duplicate.

[Christian Boos]

Replying to cardillr@rl.af.mil:

If I configure the "anonymous" user with "WIKI_ADMIN" then I can edit and preview Wiki pages as expected (i.e., WikiStart or Sandbox). However, if I configure my user "domain\user" with "TRAC_ADMIN" or "WIKI_ADMIN" it just displays a blank page with the "Create this page" button as if it doesn't exist. …

Looks like a duplicate of #3142.