Ability to hide certain tickets or ticket comments from certain users/groups

[James Tait <james.tait@…>]

We are investigating the possibility of switching our ticket tracking system from PVCS Tracker 7.0.15 to Trac as we have recently had a Trac 0.10.3 instance set up for the Wiki. One thing that we would like to be able to do (I don't believe we can currently do this in PVCS Tracker either) is to mark certain sensitive tickets or ticket comments to be not visible to the customer. Examples might include security- or privacy-sensitive content. Might this be possible with this version of Trac, or the the Fine Grained Permissions in Trac 0.11?

[Christian Boos]

Yes, this is possible with Trac 0.11, see TracFineGrainedPermissions and then more specifically source:trunk/sample-plugins/permissions/vulnerability_tickets.py​

[Ryan J Ollos <ryano@…>]

Replying to James Tait <james.tait@…>:

… One thing that we would like to be able to do (I don't believe we can currently do this in PVCS Tracker either) is to mark certain sensitive tickets or ticket comments to be not visible to the customer.

jonas suggested a way to restrict access to tickets using TracFineGrainedPermissions and the vulnerability_tickets plugin, but as I mentioned in a ​mailing list post that made reference to this ticket, I don't think its possible to hide comments without writing a new plugin that modifies the Genshi stream (implementing ITemplateStreamFilter).