Opened 18 years ago
Last modified 10 years ago
#4226 new enhancement
tracd: access control for list of projects
Reported by: | anonymous | Owned by: | |
---|---|---|---|
Priority: | normal | Milestone: | unscheduled |
Component: | web frontend/tracd | Version: | 0.10.2 |
Severity: | normal | Keywords: | security authentication |
Cc: | Branch: | ||
Release Notes: | |||
API Changes: | |||
Internal Changes: |
Description
I have tracd running with a few projects. When you go to http://host:port/, there is a list of "Available Projects". I would like to restrict access to this page, by something like .htaccess/.htpasswd in apache. Is this possible?
Attachments (0)
Change History (7)
comment:1 by , 18 years ago
comment:2 by , 18 years ago
Keywords: | security authentication added; tracd htaccess htdigest access control password removed |
---|
(applying TracTicketTriage rules)
follow-up: 4 comment:3 by , 18 years ago
I'd like the same thing, since my different sets of users are interested in different projects, so a static HTML page wouldn't solve that either ;(
My clients which have multiple projects like to switch from one to other using the projects list screen, but I don't necessarily want them to see all the other projects we work on.
comment:4 by , 18 years ago
Milestone: | → 1.0 |
---|
Replying to marcin at brzezinski dot net:
I'd like the same thing, since my different sets of users are interested in different projects, so a static HTML page wouldn't solve that either ;(
This is slightly more complex, as instead of an all or nothing access, you're wanting to check access to each env in turn. That might involve having to open each environment in turn for such a request. That's eventually doable if the environments are not cached afterwards.
Anyway, the support for multiple project done this way will probably remain weak, that's why we're favoring the TracMultipleProjects/SingleEnvironment approach. There, having such a dynamic list of projects per user would be easily doable (and probably a required feature).
Back to the TracMultipleProjects/MultipleEnvironments case, one alternative solution would be to have a default environment that could be used for checking the PROJECT_VIEW permission. That default environment could be easily set by using the TRAC_ENV_PARENT_DIR and TRAC_ENV_DIR parameters at the same time.
comment:6 by , 14 years ago
Milestone: | triaging → unscheduled |
---|
comment:7 by , 10 years ago
Owner: | removed |
---|
Not really. You can essentially disable it by providing a new, blank template for that page (see TracInterfaceCustomization for how).